CVE-2012-5543

Published: Dec 3, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Feeds module 7.x-2.x before 7.x-2.0-alpha6 for Drupal, when a field is mapped to the node's author, does not properly check permissions, which allows remote attackers to create arbitrary nodes via a crafted source feed.

Affected (6)

Products: Feeds Project: Feeds

Feeds Project

1 product

Feeds

Configuration A

6 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Feeds Project Feeds	Version 7.x-2.0 alpha1
Feeds Project Feeds	Version 7.x-2.0 alpha2
Feeds Project Feeds	Version 7.x-2.0 alpha3
Feeds Project Feeds	Version 7.x-2.0 alpha4
Feeds Project Feeds	Version 7.x-2.0 alpha5
Feeds Project Feeds	Version 7.x-2.x