Drupal: >> Aggregation Module >> 5 Security Vulnerabilities
The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions.
CVSS Score
6.8
EPSS Score
0.003
Published
2008-07-03
The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary extensions.
CVSS Score
9.3
EPSS Score
0.022
Published
2008-07-03