Commentrss

commentrss

Vendor: Dave Reid • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2009-3568

2Dave Reid

Gabor Hojtsy

2Commentrss

Commentrss

Apr 23, 2026

Oct 6, 2009

N/A· v4

N/A· v3

5.0 MEDIUM· v2

Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to the RSS feed, which allows remote attackers to obtain the node title and possibly...Show more