Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2016-7570
Description:Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-7570
BugTraq ID: 93101
http://www.securityfocus.com/bid/93101
http://www.securitytracker.com/id/1036886




© 1998-2025 E-Soft Inc. All rights reserved.