Unrated severityNVD Advisory· Published Oct 6, 2009· Updated Jun 16, 2026
CVE-2009-3568
CVE-2009-3568
Description
Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to the RSS feed, which allows remote attackers to obtain the node title and possibly other sensitive content by reading the feed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:a:dave_reid:commentrss:5.x-2.1:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:dave_reid:commentrss:5.x-2.1:*:*:*:*:*:*:*
- cpe:2.3:a:dave_reid:commentrss:6.x-2.1:*:*:*:*:*:*:*
- cpe:2.3:a:gabor_hojtsy:commentrss:5.x-1.0:*:*:*:*:*:*:*
- cpe:2.3:a:gabor_hojtsy:commentrss:5.x-1.1:*:*:*:*:*:*:*
- cpe:2.3:a:gabor_hojtsy:commentrss:5.x-1.2:*:*:*:*:*:*:*
- cpe:2.3:a:gabor_hojtsy:commentrss:5.x-1.x:dev:*:*:*:*:*:*
- cpe:2.3:a:gabor_hojtsy:commentrss:5.x-2.0:*:*:*:*:*:*:*
- cpe:2.3:a:gabor_hojtsy:commentrss:5.x-2.x:dev:*:*:*:*:*:*
- cpe:2.3:a:gabor_hojtsy:commentrss:6.x-1.0:*:*:*:*:*:*:*
- cpe:2.3:a:gabor_hojtsy:commentrss:6.x-1.1:*:*:*:*:*:*:*
- cpe:2.3:a:gabor_hojtsy:commentrss:6.x-1.2:*:*:*:*:*:*:*
- cpe:2.3:a:gabor_hojtsy:commentrss:6.x-2.0:*:*:*:*:*:*:*
- cpe:2.3:a:gabor_hojtsy:commentrss:6.x-2.x:dev:*:*:*:*:*:*
- Range: <5.x-2.2 and <6.x-2.2
Patches
Vulnerability mechanics
References
6- drupal.org/node/579280nvdPatchVendor Advisory
- drupal.org/node/579290nvdPatchVendor Advisory
- drupal.org/node/579292nvdPatchVendor Advisory
- secunia.com/advisories/36787nvdVendor Advisory
- www.osvdb.org/58177nvd
- www.securityfocus.com/bid/36429nvd
News mentions
0No linked articles in our index yet.