3.5

CVE-2015-7229

The Twitter module 6.x-5.x before 6.x-5.2, 7.x-5.x before 7.x-5.9, and 7.x-6.x before 7.x-6.0 for Drupal does not properly check access permissions, which allows remote authenticated users to post tweets to arbitrary accounts by leveraging the (1) "post to twitter" permission or change the options for arbitrary attached accounts by leveraging the (2) "add twitter accounts" or (3) "add authenticated twitter accounts" permission.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Twitter Project ≫ Twitter Version 6.x-5.0 SwPlatform drupal
Twitter Project ≫ Twitter Version 6.x-5.1 SwPlatform drupal
Twitter Project ≫ Twitter Version 6.x-5.x Update dev SwPlatform drupal
Twitter Project ≫ Twitter Version 7.x-5.0 SwPlatform drupal
Twitter Project ≫ Twitter Version 7.x-5.1 SwPlatform drupal
Twitter Project ≫ Twitter Version 7.x-5.2 SwPlatform drupal
Twitter Project ≫ Twitter Version 7.x-5.3 SwPlatform drupal
Twitter Project ≫ Twitter Version 7.x-5.4 SwPlatform drupal
Twitter Project ≫ Twitter Version 7.x-5.5 SwPlatform drupal
Twitter Project ≫ Twitter Version 7.x-5.6 SwPlatform drupal
Twitter Project ≫ Twitter Version 7.x-5.7 SwPlatform drupal
Twitter Project ≫ Twitter Version 7.x-5.8 SwPlatform drupal
Twitter Project ≫ Twitter Version 7.x-6.0 Update alpha1 SwPlatform drupal
Twitter Project ≫ Twitter Version 7.x-6.0 Update alpha2 SwPlatform drupal
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.98% 0.576
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.drupal.org/node/2559981
Patch
https://www.drupal.org/node/2559985
Patch
https://www.drupal.org/node/2559989
Patch
https://www.drupal.org/node/2565827
Patch
Vendor Advisory