| Package | Affected versions | Patched versions |
|---|---|---|
| cck | = 5.x-1.0= 5.x-1.1= 5.x-1.2= 5.x-1.3= 5.x-1.7= 5.x-1.x= 6.x-2.0= 6.x-2.1= 6.x-2.2= 6.x-2.3= 6.x-2.4= 6.x-2.5= 6.x-2.6 | |
| cck | = 5.x-1.10= 5.x-1.4= 5.x-1.5= 5.x-1.6= 5.x-1.6-1= 5.x-1.8= 5.x-1.9 |
The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupal does not perform access checks before displaying referenced nodes, which allows remote attackers to read controlled nodes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free