Description
The Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform access checks for a node before displaying comments, which allows remote attackers to obtain sensitive information.
References
- 31908 third-party-advisory
- talk-comments-security-bypass(45223) vdb-entry
- ADV-2008-2615 vdb-entry
- http://drupal.org/node/309758
- 31236 vdb-entry