Listhandler
1 CVEs
product
Monthly
The Listhandler module 6.x-1.x before 6.x-1.1 for Drupal does not properly check permissions when importing emails, which allows remote comment authors to bypass access restrictions and possibly have. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.
Privilege Escalation
Listhandler
NVD
CVSS 2.0
7.5
EPSS
0.3%
EPSS 0%
CVSS 7.5
HIGH
PATCH
This Week
The Listhandler module 6.x-1.x before 6.x-1.1 for Drupal does not properly check permissions when importing emails, which allows remote comment authors to bypass access restrictions and possibly have. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.
Privilege Escalation
Listhandler
NVD