CVE-2009-2237: High severity drupal vulnerability
Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures (aka actions).
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2237?
CVE-2009-2237 is considered a critical vulnerability as it allows remote attackers to bypass access restrictions.
How do I fix CVE-2009-2237?
To fix CVE-2009-2237, you should update Views Bulk Operations to version 5.x-1.4 or 6.x-1.7 or later.
Which versions of Views Bulk Operations are affected by CVE-2009-2237?
CVE-2009-2237 affects Views Bulk Operations versions 5.x-1.0 to 5.x-1.3 and 6.x-1.0 to 6.x-1.4.
What can attackers achieve by exploiting CVE-2009-2237?
By exploiting CVE-2009-2237, attackers can modify nodes or classes of nodes without proper permissions.
Is there a workaround for CVE-2009-2237 if I cannot update immediately?
There is no official workaround for CVE-2009-2237, so updating to a secure version is the recommended approach.