3.5

CVE-2013-1925

The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read restricted node titles via an autocomplete list.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Chaos Tool Suite Project ≫ Ctools Version7.x-1.0 SwPlatformdrupal
Chaos Tool Suite Project ≫ Ctools Version7.x-1.0 Updatealpha1 SwPlatformdrupal
Chaos Tool Suite Project ≫ Ctools Version7.x-1.0 Updatealpha2 SwPlatformdrupal
Chaos Tool Suite Project ≫ Ctools Version7.x-1.0 Updatealpha3 SwPlatformdrupal
Chaos Tool Suite Project ≫ Ctools Version7.x-1.0 Updatealpha4 SwPlatformdrupal
Chaos Tool Suite Project ≫ Ctools Version7.x-1.0 Updatebeta1 SwPlatformdrupal
Chaos Tool Suite Project ≫ Ctools Version7.x-1.0 Updaterc1 SwPlatformdrupal
Chaos Tool Suite Project ≫ Ctools Version7.x-1.0 Updaterc2 SwPlatformdrupal
Chaos Tool Suite Project ≫ Ctools Version7.x-1.1 SwPlatformdrupal
Chaos Tool Suite Project ≫ Ctools Version7.x-1.2 SwPlatformdrupal
Chaos Tool Suite Project ≫ Ctools Version7.x-1.x Updatedev SwPlatformdrupal
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.592
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:P/I:N/A:N
https://drupal.org/node/1960406
Patch
Vendor Advisory