CVE:CVE-2013-4597
CNNVD:CNNVD-201311-220
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。Revisioning是其中的一个提供了内容审核发布功能的模块。
Drupal Revisioning模块7.x-1.6之前的7.x-1.x版本中存在安全漏洞，该漏洞源于当结合使用Scheduled模块时，模块没有正确检查节点的访问权限。远程攻击者可利用该漏洞获取敏感信息。
solution:Upgrade rik_de_boer revisioning to a higher version than 7.x-1.0,7.x-1.0:alpha1,7.x-1.0:alpha2,7.x-1.0:alpha3,7.x-1.0:alpha4,7.x-1.0:alpha5,7.x-1.0:beta1,7.x-1.0:beta10,7.x-1.0:beta11,7.x-1.0:beta2,7.x-1.0:beta3,7.x-1.0:beta4,7.x-1.0:beta5,7.x-1.0:beta6,7.x-1.0:beta7,7.x-1.0:beta8,7.x-1.0:beta9,7.x-1.1,7.x-1.2,7.x-1.3,7.x-1.4,7.x-1.5,7.x-1.x,7.x-1.x:dev,and avoid the version 7.x-1.0,7.x-1.0:alpha1,7.x-1.0:alpha2,7.x-1.0:alpha3,7.x-1.0:alpha4,7.x-1.0:alpha5,7.x-1.0:beta1,7.x-1.0:beta10,7.x-1.0:beta11,7.x-1.0:beta2,7.x-1.0:beta3,7.x-1.0:beta4,7.x-1.0:beta5,7.x-1.0:beta6,7.x-1.0:beta7,7.x-1.0:beta8,7.x-1.0:beta9,7.x-1.1,7.x-1.2,7.x-1.3,7.x-1.4,7.x-1.5,7.x-1.x,7.x-1.x:dev