CVE-2009-2237

Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures (aka actions).

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2009-06-27

Last modified

2024-08-07

Affected products

• Views Bulk Operations (Karim Ratib)

References

• http://drupal.org/node/468450
• http://secunia.com/advisories/35117
• http://www.securityfocus.com/bid/35051
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50659