CVE-2010-2353
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Node Reference module in Content Construction Kit (CCK) module 6.x before 6.x-2.7 for Drupal does not perform access checks for the source field in the backend URL for the autocomplete widget, which allows remote attackers to discover titles and IDs of controlled nodes.
El módulo "Node Reference" (referencia de nodo) en el módulo "Content Construction Kit" (CCK o kit de construcción de contenido) v6.x en versiones anteriores a la v6.x-2.7 para Drupal no realiza comprobaciones de acceso para el campo "source" (fuente) en la URL de administración para la funcionalidad autocompletar (autocomplete widget), lo que permite a atacantes remotos descubrir títulos e IDs de los nodos controlados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-06-21 CVE Reserved
- 2010-06-21 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/65615 | Vdb Entry | |
| http://secunia.com/advisories/40318 | Third Party Advisory | |
| http://www.vupen.com/english/advisories/2010/1546 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/59515 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://drupal.org/node/829566 | 2017-08-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-1.0-alpha Search vendor "Yves Chedemois" for product "Cck" and version "6.x-1.0-alpha" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-1.x-dev Search vendor "Yves Chedemois" for product "Cck" and version "6.x-1.x-dev" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.0 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.0" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.0 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.0" | beta |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.0 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.0" | rc1 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.0 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.0" | rc10 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.0 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.0" | rc2 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.0 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.0" | rc3 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.0 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.0" | rc4 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.0 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.0" | rc5 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.0 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.0" | rc6 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.0 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.0" | rc7 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.0 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.0" | rc8 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.0 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.0" | rc9 |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.1 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.1" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.2 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.2" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.3 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.3" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.4 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.4" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.5 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.5" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.6 Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.6" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-2.x-dev Search vendor "Yves Chedemois" for product "Cck" and version "6.x-2.x-dev" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Yves Chedemois Search vendor "Yves Chedemois" | Cck Search vendor "Yves Chedemois" for product "Cck" | 6.x-3.x-dev Search vendor "Yves Chedemois" for product "Cck" and version "6.x-3.x-dev" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|