CVE-2016-3165
- Source
- https://cve.org/CVERecord?id=CVE-2016-3165
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3165.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-3165
- Aliases
- Published
- 2016-04-12T15:59:03Z
- Modified
- 2026-10-20T10:48:23Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The Form API in Drupal 6.x before 6.38 ignores access restrictions on submit buttons, which might allow remote attackers to bypass intended access restrictions by leveraging permission to submit a form with a button that has "#access" set to FALSE in the server-side form definition.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:6.0:rc1:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:6.0:rc2:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:6.0:rc3:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:6.0:rc4:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "6.0-beta1" }, { "last_affected": "6.0-beta1" }, { "introduced": "6.0-beta2" }, { "last_affected": "6.0-beta2" }, { "introduced": "6.0-beta3" }, { "last_affected": "6.0-beta3" }, { "introduced": "6.0-beta4" }, { "last_affected": "6.0-beta4" }, { "introduced": "6.0-rc1" }, { "last_affected": "6.0-rc1" }, { "introduced": "6.0-rc2" }, { "last_affected": "6.0-rc2" }, { "introduced": "6.0-rc3" }, { "last_affected": "6.0-rc3" }, { "introduced": "6.0-rc4" }, { "last_affected": "6.0-rc4" } ], "source": "CPE_STRING" } ], "vendor_product": "drupal:drupal" } ] }- References
Affected packages
Git / github.com/drupal/drupal
Affected ranges
- Type
- GIT
- Repo
- https://github.com/drupal/drupal
- Events
-
IntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*", "range": [ { "introduced": "6.0" }, { "last_affected": "6.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.0:dev:*:*:*:*:*:*", "range": [ { "introduced": "6.0-dev" }, { "last_affected": "6.0-dev" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*", "range": [ { "introduced": "6.1" }, { "last_affected": "6.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*", "range": [ { "introduced": "6.2" }, { "last_affected": "6.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*", "range": [ { "introduced": "6.3" }, { "last_affected": "6.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*", "range": [ { "introduced": "6.4" }, { "last_affected": "6.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*", "range": [ { "introduced": "6.5" }, { "last_affected": "6.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*", "range": [ { "introduced": "6.6" }, { "last_affected": "6.6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*", "range": [ { "introduced": "6.7" }, { "last_affected": "6.7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*", "range": [ { "introduced": "6.8" }, { "last_affected": "6.8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*", "range": [ { "introduced": "6.9" }, { "last_affected": "6.9" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*", "range": [ { "introduced": "6.10" }, { "last_affected": "6.10" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*", "range": [ { "introduced": "6.11" }, { "last_affected": "6.11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*", "range": [ { "introduced": "6.12" }, { "last_affected": "6.12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.13:*:*:*:*:*:*:*", "range": [ { "introduced": "6.13" }, { "last_affected": "6.13" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.14:*:*:*:*:*:*:*", "range": [ { "introduced": "6.14" }, { "last_affected": "6.14" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.15:*:*:*:*:*:*:*", "range": [ { "introduced": "6.15" }, { "last_affected": "6.15" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.16:*:*:*:*:*:*:*", "range": [ { "introduced": "6.16" }, { "last_affected": "6.16" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.17:*:*:*:*:*:*:*", "range": [ { "introduced": "6.17" }, { "last_affected": "6.17" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.18:*:*:*:*:*:*:*", "range": [ { "introduced": "6.18" }, { "last_affected": "6.18" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.19:*:*:*:*:*:*:*", "range": [ { "introduced": "6.19" }, { "last_affected": "6.19" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.20:*:*:*:*:*:*:*", "range": [ { "introduced": "6.20" }, { "last_affected": "6.20" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.21:*:*:*:*:*:*:*", "range": [ { "introduced": "6.21" }, { "last_affected": "6.21" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.22:*:*:*:*:*:*:*", "range": [ { "introduced": "6.22" }, { "last_affected": "6.22" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.23:*:*:*:*:*:*:*", "range": [ { "introduced": "6.23" }, { "last_affected": "6.23" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.24:*:*:*:*:*:*:*", "range": [ { "introduced": "6.24" }, { "last_affected": "6.24" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.25:*:*:*:*:*:*:*", "range": [ { "introduced": "6.25" }, { "last_affected": "6.25" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.26:*:*:*:*:*:*:*", "range": [ { "introduced": "6.26" }, { "last_affected": "6.26" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.27:*:*:*:*:*:*:*", "range": [ { "introduced": "6.27" }, { "last_affected": "6.27" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.28:*:*:*:*:*:*:*", "range": [ { "introduced": "6.28" }, { "last_affected": "6.28" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.29:*:*:*:*:*:*:*", "range": [ { "introduced": "6.29" }, { "last_affected": "6.29" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.30:*:*:*:*:*:*:*", "range": [ { "introduced": "6.30" }, { "last_affected": "6.30" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.31:*:*:*:*:*:*:*", "range": [ { "introduced": "6.31" }, { "last_affected": "6.31" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.32:*:*:*:*:*:*:*", "range": [ { "introduced": "6.32" }, { "last_affected": "6.32" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.33:*:*:*:*:*:*:*", "range": [ { "introduced": "6.33" }, { "last_affected": "6.33" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.34:*:*:*:*:*:*:*", "range": [ { "introduced": "6.34" }, { "last_affected": "6.34" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.35:*:*:*:*:*:*:*", "range": [ { "introduced": "6.35" }, { "last_affected": "6.35" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.36:*:*:*:*:*:*:*", "range": [ { "introduced": "6.36" }, { "last_affected": "6.36" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:drupal:drupal:6.37:*:*:*:*:*:*:*", "range": [ { "introduced": "6.37" }, { "last_affected": "6.37" } ], "source": "CPE_STRING" } ] }