The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access checks, which allows remote attackers with "access content" permissions to bypass restrictions and modify the node hierarchy via unspecified attack vectors.
| Software | From | Fixed in |
|---|---|---|
drupal / drupal
|
5.0 | 5.0.x |
| drupal / node_hierarchy_module | 5 | 5.x |
| drupal / node_hierarchy_module | 6 | 6.x |
drupal / drupal
|
6.0 | 6.0.x |