Drupal · Drupal Talk Module · CVE-2008-4153
**Name of the Vulnerable Software and Affected Versions**
Drupal Talk module versions 5.x before 5.x-1.3
Drupal Talk module versions 6.x before 6.x-1.5
**Description**
The issue allows remote attackers to obtain sensitive information because it does not perform access checks for a node before displaying comments.
**Recommendations**
For versions 5.x, update to 5.x-1.3 or later to resolve the issue.
For versions 6.x, update to 6.x-1.5 or later to resolve the issue.