AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-4558

MEDIUM · CVSS 5 EPSS 1.26%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-01-04 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2009-4558
Severity
MEDIUM
CVSS
5
EPSS
1.26%

Original NVD Description

The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the (1) title or (2) body of an arbitrary node via unknown vectors.