CVE-2008-3745: Medium severity drupal vulnerability
Published Aug 27, 2008
·Updated
The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download unauthorized attachments via unspecified vectors.
Affected Software
5 affected components
Drupal Drupal=6.2
Drupal Drupal=6.1
Drupal Upload module
Drupal Drupal=6.0
Drupal Drupal=6.3
Remediation
Patch Available
Event History
Aug 27, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3745?
CVE-2008-3745 is considered a medium severity vulnerability that allows unauthorized access to node editing and file deletion.
2
How do I fix CVE-2008-3745?
To fix CVE-2008-3745, update the Drupal Upload module to a version that is patched, specifically version 6.4 or later.
3
Who is affected by CVE-2008-3745?
CVE-2008-3745 affects users of Drupal 6.x versions prior to 6.4 who have access to the Upload module.
4
What types of attacks can be executed using CVE-2008-3745?
CVE-2008-3745 can be exploited for unauthorized node edits, file deletions, and downloading of restricted attachments.
5
Is there any workaround for CVE-2008-3745?
Currently, there are no known workarounds for CVE-2008-3745 other than updating to the secured version.