Drupal Save Draft Module Security Bypass Vulnerability

Bugtraq ID:	47614
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 27 2011 12:00AM
Updated:	Apr 27 2011 12:00AM
Credit:	David Rothstein.
Vulnerable:	Dan Jukes Save Draft 7.x-1.3 Dan Jukes Save Draft 6.X-1.7
Not Vulnerable:	Dan Jukes Save Draft 7.x-1.4 Dan Jukes Save Draft 6.X-1.8

Drupal Save Draft Module Security Bypass Vulnerability

The Save Draft module for Drupal is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization.

Attackers can exploit this issue to bypass security restrictions to perform unauthorized actions; this may aid in launching further attacks.

Save Draft versions 6.x prior to 6.x-1.8 and 7.x prior to 7.x-1.4 are vulnerable.

Drupal Save Draft Module Security Bypass Vulnerability

Attackers can exploit this issue through a browser.

Drupal Save Draft Module Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more details.


Dan Jukes Save Draft 6.X-1.7

• Dan Jukes save_draft-6.x-1.8.tar.gz
  http://drupal.org/node/1139378

Dan Jukes Save Draft 7.x-1.3

• save_draft-7.x-1.4.tar.gz
  http://drupal.org/node/1139380

Drupal Save Draft Module Security Bypass Vulnerability

References:

• Drupal Homepage (Drupal)
  
• SA-CONTRIB-2011-017 - Save Draft - Validation Bypass (Drupal)
  
• Save Draft Homepage (Dan Jukes)