Description
The Feeds module 7.x-2.x before 7.x-2.0-alpha6 for Drupal, when a field is mapped to the node's author, does not properly check permissions, which allows remote attackers to create arbitrary nodes via a crafted source feed.
Unscored
CVE-2012-5543
EUVD-2012-5435GHSA-c8j8-rr3j-m922
The Feeds module 7.x-2.x before 7.x-2.0-alpha6 for Drupal, when a field is mapped to the node's author, does not properly check permissions…
Published Dec 3, 2012 · Updated Sep 17, 2024 · Assigned by redhat