VULNERABILITY INTELLIGENCE
CVE-2008-4790
CVSS score6 MEDIUM
EPSS probability1.00%
CISA KEVNot currently listed
Published2008-10-29
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:P
Description
The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" via unknown vectors.