CVE-2010-2352

Published: Jun 21, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupal does not perform access checks before displaying referenced nodes, which allows remote attackers to read controlled nodes.

Affected (30)

Products: Karen Stevenson: Cck · Yves Chedemois: Cck

1 product

1 product

Configuration A

30 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Karen Stevenson Cck	Version 5.x-1.0 beta
Karen Stevenson Cck	Version 5.x-1.1
Karen Stevenson Cck	Version 5.x-1.2
Karen Stevenson Cck	Version 5.x-1.3
Karen Stevenson Cck	Version 5.x-1.7
Karen Stevenson Cck	Version 5.x-1.x dev
Karen Stevenson Cck	Version 6.x-2.0
Karen Stevenson Cck	Version 6.x-2.0 beta
Karen Stevenson Cck	Version 6.x-2.0 rc10
Karen Stevenson Cck	Version 6.x-2.0 rc2
Karen Stevenson Cck	Version 6.x-2.0 rc3
Karen Stevenson Cck	Version 6.x-2.0 rc4
Karen Stevenson Cck	Version 6.x-2.0 rc5
Karen Stevenson Cck	Version 6.x-2.0 rc6
Karen Stevenson Cck	Version 6.x-2.0 rc7
Karen Stevenson Cck	Version 6.x-2.0 rc8
Karen Stevenson Cck	Version 6.x-2.0 rc9
Karen Stevenson Cck	Version 6.x-2.1
Karen Stevenson Cck	Version 6.x-2.2
Karen Stevenson Cck	Version 6.x-2.3
Karen Stevenson Cck	Version 6.x-2.4
Karen Stevenson Cck	Version 6.x-2.5
Karen Stevenson Cck	Version 6.x-2.6
Yves Chedemois Cck	Version 5.x-1.10
Yves Chedemois Cck	Version 5.x-1.4
Yves Chedemois Cck	Version 5.x-1.5
Yves Chedemois Cck	Version 5.x-1.6-1
Yves Chedemois Cck	Version 5.x-1.6
Yves Chedemois Cck	Version 5.x-1.8
Yves Chedemois Cck	Version 5.x-1.9