CVE-2016-7570 | BDVDB-2026-78467 Detail

Description#

Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.drupal.org/SA-CORE-2016-004
http://www.securityfocus.com/bid/93101
http://www.securitytracker.com/id/1036886

Exploit#

No public exploit known

History#

Version 12016-10-03Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.