AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-3207

MEDIUM · CVSS 6.8 EPSS 1.53%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-09-16 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.8. It may be remotely exploitable.

CVE
CVE-2009-3207
Severity
MEDIUM
CVSS
6.8
EPSS
1.53%

Original NVD Description

The ImageCache module 5.x before 5.x-2.5 and 6.x before 6.x-2.0-beta10, a module for Drupal, when the private file system is used, does not properly perform access control for derivative images, which allows remote attackers to view arbitrary images via a request that specifies an image's filename.