• info
• discussion
• exploit
• solution
• references

Drupal Node Access User Reference Module Security Bypass Vulnerability

Solution:
The vendor has released fixes and an advisory. Please see the references for more information.


Drupal Node Access User Reference 6.x-2.0-beta5

• Drupal nodeaccess_userreference-6.x-2.0-beta6.tar.gz
  http://ftp.drupal.org/files/projects/nodeaccess_userreference-6.x-2.0- beta6.tar.gz

Drupal Node Access User Reference 5.x-2.0-beta3

• Drupal nodeaccess_userreference-5.x-2.0-beta4.tar.gz
  http://ftp.drupal.org/files/projects/nodeaccess_userreference-5.x-2.0- beta4.tar.gz