CVE:CVE-2010-4775
CNNVD:CNNVD-201103-309
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。
基于Drupal的Relevant Content模块5.x-1.4之前的5.x版本，及6.x-1.5之前的6.x版本没有正确实现节点访问逻辑。远程攻击者可以通过访问节点，发现受限节点标题与节点关系。
solution:Upgrade nicholas_thompson relevant_content to a higher version than 5.x-1.0,5.x-1.1,5.x-1.2,5.x-1.3,5.x-1.x-dev,6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.x-dev,and avoid the version 5.x-1.0,5.x-1.1,5.x-1.2,5.x-1.3,5.x-1.x-dev,6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.x-dev