On some version ( less than 4.6.3 ) this could leads to execute some exploits even if posting comments is disabled.

CommentFileSizeAuthor
comment_18.patch640 byteskuba.zygmunt

Comments

magico’s picture

magico commented
Version: 4.6.3 » 4.6.9
dries’s picture

dries commented

Committed to DRUPAL-4-6.

magico’s picture

magico commented
Status: Needs review » Fixed
Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)