CVE:CVE-2009-3568
CNNVD:CNNVD-200910-140
当一个链接添加到RSS输入端时，Drupal Comment RSS 5.x-2.2之前的5.x和6.x-2.2之前的6.x版本没有正确的执行许可，这使得远程攻击者可以通过读取该输入端，获得节点标题和可能其他敏感内容。
solution:Upgrade dave_reid commentrss to a higher version than 5.x-2.1,6.x-2.1,and avoid the version 5.x-2.1,6.x-2.1; Upgrade gabor_hojtsy commentrss to a higher version than 5.x-1.0,5.x-1.1,5.x-1.2,5.x-1.x:dev,5.x-2.0,5.x-2.x:dev,6.x-1.0,6.x-1.1,6.x-1.2,6.x-2.0,6.x-2.x:dev,and avoid the version 5.x-1.0,5.x-1.1,5.x-1.2,5.x-1.x:dev,5.x-2.0,5.x-2.x:dev,6.x-1.0,6.x-1.1,6.x-1.2,6.x-2.0,6.x-2.x:dev