Description
The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | drupal/drupal | >= 5.0, < 5.11 | 5.11 | GHSA-ph2j-5hxq-gxrr |
References
- http://drupal.org/node/318706
- 32200 third-party-advisory
- drupal-nodemoduleapi-security-bypass(45763) vdb-entry
- [oss-security] 20081021 CVE req: drupal < 5.11/6.5 mailing-list