CVE-2012-2724 The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is....
MediumCVSS 5.3
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is required, which allows remote attackers to obtain sensitive information via the confirmation page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simplenews | = 6.x-1.x before 6.x-1.4 | No fix listed |
| simplenews | = 6.x-2.x before 6.x-2.0-alpha4 | No fix listed |
| simplenews | = and 7.x-1.x before 7.x-1.0-rc1 | No fix listed |
| md-systems simplenews | = 6.x-1.0 | No fix listed |
| md-systems simplenews | = 6.x-1.0-beta1 | No fix listed |
| md-systems simplenews | = 6.x-1.0-beta2 | No fix listed |
| md-systems simplenews | = 6.x-1.0-beta3 | No fix listed |
| md-systems simplenews | = 6.x-1.0-beta4 | No fix listed |
| md-systems simplenews | = 6.x-1.0-beta5 | No fix listed |
| md-systems simplenews | = 6.x-1.0-rc1 | No fix listed |
| md-systems simplenews | = 6.x-1.0-rc2 | No fix listed |
| md-systems simplenews | = 6.x-1.0-rc3 | No fix listed |
| md-systems simplenews | = 6.x-1.0-rc4 | No fix listed |
| md-systems simplenews | = 6.x-1.0-rc5 | No fix listed |
| md-systems simplenews | = 6.x-1.0-rc6 | No fix listed |
| md-systems simplenews | = 6.x-1.1 | No fix listed |
| md-systems simplenews | = 6.x-1.2 | No fix listed |
| md-systems simplenews | = 6.x-1.3 | No fix listed |
| md-systems simplenews | = 6.x-2.0-alpha1 | No fix listed |
| md-systems simplenews | = 6.x-2.0-alpha2 | No fix listed |
| md-systems simplenews | = 6.x-2.0-alpha3 | No fix listed |
| md-systems simplenews | = 6.x-2.x-dev | No fix listed |
| md-systems simplenews | = 7.x-1.0 | No fix listed |
| md-systems simplenews | = 7.x-1.0-alpha1 | No fix listed |
| md-systems simplenews | = 7.x-1.0-alpha2 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| md-systems simplenews | = 7.x-1.0-beta1 | No fix listed |
| md-systems simplenews | = 7.x-1.0-beta2 | No fix listed |
References
- drupal.org third-party-advisory
- www.openwall.com mailing-list third-party-advisory
- drupal.org third-party-advisory
- drupal.org third-party-advisory
- drupal.org third-party-advisory
- drupalcode.org permissions-required third-party-advisory
- drupalcode.org permissions-required third-party-advisory
- drupalcode.org permissions-required third-party-advisory
- www.securityfocus.com third-party-advisory vdb-entry
- exchange.xforce.ibmcloud.com third-party-advisory vdb-entry