{"id":"GHSA-ph2j-5hxq-gxrr","aliases":["CVE-2008-4793"],"title":"Drupal Node Validation Bypass in the node module API","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules.","severity":"high","score":null,"published":"2022-05-17T02:19:15.000Z","modified":"2024-02-09T19:26:52.949Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"drupal/drupal","sources":[{"name":"OSV · GHSA-ph2j-5hxq-gxrr","url":"https://osv.dev/vulnerability/GHSA-ph2j-5hxq-gxrr"}],"ranges":[{"events":[{"introduced":"5.0"},{"fixed":"5.11"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["5.11"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2008-4793","https://exchange.xforce.ibmcloud.com/vulnerabilities/45763","https://github.com/drupal/drupal","https://web.archive.org/web/20090302033759/http://secunia.com/advisories/32200","http://drupal.org/node/318706","http://www.openwall.com/lists/oss-security/2008/10/21/7"],"sources":[{"name":"OSV","id":"GHSA-ph2j-5hxq-gxrr","modified":"2024-02-09T19:26:52.949666Z","url":"https://osv.dev/vulnerability/GHSA-ph2j-5hxq-gxrr"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T02:30:33.887Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}