CVE-2008-2771

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-06-18 · updated 2026-06-16
Weakness: CWE-264

Description

The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access checks, which allows remote attackers with "access content" permissions to bypass restrictions and modify the node hierarchy via unspecified attack vectors.

Affected products

Drupal: 5.0, 6.0
Drupal Node Hierarchy Module: 5, 6

References

http://drupal.org/node/269473
http://secunia.com/advisories/30622
http://www.securityfocus.com/bid/29675
https://exchange.xforce.ibmcloud.com/vulnerabilities/43006
http://drupal.org/node/269473
http://secunia.com/advisories/30622
http://www.securityfocus.com/bid/29675
https://exchange.xforce.ibmcloud.com/vulnerabilities/43006

Get alerted when CVE-2008-2771 or the next vulnerability affects your stack