CVE-2008-4793
Drupal Node Validation Bypass in the node module API
EPSS 0.30%
Description
The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules.
How to fix CVE-2008-4793
To remediate CVE-2008-4793, upgrade the affected package to a fixed version below.
- Packagist/drupal/drupal—upgrade to 5.11 or later
Is CVE-2008-4793 being exploited?
Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- >= 5.0, < 5.11