CVE-2008-3000: Drupal Aggregation Module

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions.

Affected products

• Drupal Aggregation Module: version 3.0 only; version 3.1 only; version 3.2 only; version 4.0 only; version 4.1 only; version 4.2 only; …

Published 2008-07-03. Last modified 2026-06-16.