5

CVE-2012-4483

The commons_discussion_views_default_views function in modules/features/commons_discussion/commons_discussion.views_default.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensitive information via the recent comments listing.

Data is provided by the National Vulnerability Database (NVD)
AcquiaCommons Version6.x-2.4
   DrupalDrupal Version-
AcquiaCommons Version6.x-2.5
   DrupalDrupal Version-
AcquiaCommons Version6.x-2.6
   DrupalDrupal Version-
AcquiaCommons Version6.x-2.7
   DrupalDrupal Version-
AcquiaCommons Version6.x-2.x Updatedev
   DrupalDrupal Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.36% 0.55
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N