CVE-2009-2077: Medium severity Angrydonuts Views vulnerability
Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and (1) read unpublished content from anonymous users when a view is already configured to display the content, and (2) read private content in generated queries.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2077?
CVE-2009-2077 has a medium severity level, as it allows unauthorized access to unpublished and private content.
How do I fix CVE-2009-2077?
Fix CVE-2009-2077 by updating the Angrydonuts Views module to version 6.x-2.6 or later.
What versions of Angrydonuts Views are affected by CVE-2009-2077?
CVE-2009-2077 affects Angrydonuts Views versions 6.x-2.0 to 6.x-2.5.
Who is affected by CVE-2009-2077?
Remote authenticated users on Drupal sites that use impacted versions of Angrydonuts Views are affected by CVE-2009-2077.
What consequences arise from CVE-2009-2077?
CVE-2009-2077 can lead to unauthorized reading of unpublished and private content by authenticated users.