| Package: | drupal-commentrss |
| Date: | 2009-09-27 |
| Posted by: | Miklos Vajna |
| Vulnerable version: | 5.x_2.1-1 |
| Unaffected version: | 5.x_2.2-1getorin1 |
| Bug tracker entry: | http://bugs.frugalware.org/task/3949 |
| CVEs: | No CVE references, see http://drupal.org/node/579280. |
| Description: | A vulnerability has been reported in the Comment RSS module for Drupal, which can be exploited to disclose potentially sensitive information. The vulnerability is caused due to the module not properly respecting access restrictions when adding the link to a node, which can be exploited to disclose potentially sensitive information. |
