CVE-2008-2771: Drupal

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access checks, which allows remote attackers with "access content" permissions to bypass restrictions and modify the node hierarchy via unspecified attack vectors.

Affected products

• Drupal Drupal: version 5.0 only; version 6.0 only
• Drupal Node Hierarchy Module: version 5 only; version 6 only

Published 2008-06-18. Last modified 2026-06-16.