CVE-2009-2237

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-06-27 · updated 2026-06-16

Description

Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures (aka actions).

Affected products

Karim Ratib Views Bulk Operations: 5.x-1.0, 5.x-1.1, 5.x-1.2, 5.x-1.3, 6.x-1.0, 6.x-1.1 (+3)

References

http://drupal.org/node/468450
http://secunia.com/advisories/35117
http://www.securityfocus.com/bid/35051
https://exchange.xforce.ibmcloud.com/vulnerabilities/50659
http://drupal.org/node/468450
http://secunia.com/advisories/35117
http://www.securityfocus.com/bid/35051
https://exchange.xforce.ibmcloud.com/vulnerabilities/50659

Get alerted when CVE-2009-2237 or the next vulnerability affects your stack