CVE-2010-2352
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupal does not perform access checks before displaying referenced nodes, which allows remote attackers to read controlled nodes.
El módulo "Node Reference" (referencia de nodo) en el módulo "Content Construction Kit" (CCK o kit de construcción de contenido) v5.x en versiones anteriores a la v5.x-1.11 y v6.x en versiones anteriores a la v6.x-2.7 para Drupal no realiza comprobaciones de acceso antes de mostrar los nodos referenciados, lo que permite a atacantes remotos leer los nodos controlados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-06-21 CVE Reserved
- 2010-06-21 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/65615 | Vdb Entry | |
| http://secunia.com/advisories/40318 | Third Party Advisory | |
| http://www.vupen.com/english/advisories/2010/1546 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/59515 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://drupal.org/node/829566 | 2017-08-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 5.x-1.0 Search vendor "Karen Stevenson" for product "Cck" and version "5.x-1.0" | beta |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 5.x-1.1 Search vendor "Karen Stevenson" for product "Cck" and version "5.x-1.1" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 5.x-1.2 Search vendor "Karen Stevenson" for product "Cck" and version "5.x-1.2" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 5.x-1.3 Search vendor "Karen Stevenson" for product "Cck" and version "5.x-1.3" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 5.x-1.7 Search vendor "Karen Stevenson" for product "Cck" and version "5.x-1.7" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 5.x-1.x Search vendor "Karen Stevenson" for product "Cck" and version "5.x-1.x" | dev |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.0 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.0" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.0 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.0" | beta |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.0 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.0" | rc10 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.0 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.0" | rc2 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.0 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.0" | rc3 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.0 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.0" | rc4 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.0 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.0" | rc5 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.0 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.0" | rc6 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.0 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.0" | rc7 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.0 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.0" | rc8 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.0 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.0" | rc9 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.1 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.1" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.2 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.2" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.3 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.3" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.4 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.4" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.5 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.5" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karen Stevenson Search vendor "Karen Stevenson" | Cck Search vendor "Karen Stevenson" for product "Cck" | 6.x-2.6 Search vendor "Karen Stevenson" for product "Cck" and version "6.x-2.6" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 5.x-1.4 Search vendor "Yves Chedemois" for product "Cck" and version "5.x-1.4" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 5.x-1.5 Search vendor "Yves Chedemois" for product "Cck" and version "5.x-1.5" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 5.x-1.6 Search vendor "Yves Chedemois" for product "Cck" and version "5.x-1.6" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 5.x-1.6-1 Search vendor "Yves Chedemois" for product "Cck" and version "5.x-1.6-1" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 5.x-1.8 Search vendor "Yves Chedemois" for product "Cck" and version "5.x-1.8" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 5.x-1.9 Search vendor "Yves Chedemois" for product "Cck" and version "5.x-1.9" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 5.x-1.10 Search vendor "Yves Chedemois" for product "Cck" and version "5.x-1.10" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|