TI-2009-04276 CVE-2009-4520 · GHSA-c4gr-vqp8-vq6pThe CCK Comment Reference module 5.x before 5.x-1.2 and 6.x before 6.x-1.3, a module for…Priority LOW 25The CCK Comment Reference module 5.x before 5.x-1.2 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to bypass intended access restrictions and read comments by using the autocomplete path.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01242 · Published 2009-12-31 · No fix listed CWE-264