Field Assessment
AI analysis pending.
CVE
CVE-2008-1729
Severity
MEDIUM
CVSS
5.8
EPSS
2.40%
Original Filing — NVD Description
The menu system in Drupal 6 before 6.2 has incorrect menu settings, which allows remote attackers to (1) edit the profile pages of arbitrary users, and obtain sensitive information from (2) tracker and (3) blog pages, related to a missing check for the "access content" permission; and (4) allows remote authenticated users, with administration page view access, to edit content types.