CVE-2009-3352: Drupal

High severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in the quota_by_role (Quota by role) module for Drupal have unknown impact and attack vectors.

Affected products

• Drupal Drupal: from 5.0, before 7.0 (fixed in 7.0)

Published 2009-09-24. Last modified 2026-06-16.