CVE-2012-5584 The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows remote attackers to read a node's headers by accessing a table of contents block.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows remote attackers to read a node's headers by accessing a table of contents block.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| m2osw tableofcontents | = 6.x-3.0 | No fix listed |
| m2osw tableofcontents | = 6.x-3.1 | No fix listed |
| m2osw tableofcontents | = 6.x-3.2 | No fix listed |
| m2osw tableofcontents | = 6.x-3.3 | No fix listed |
| m2osw tableofcontents | = 6.x-3.4 | No fix listed |
| m2osw tableofcontents | = 6.x-3.5 | No fix listed |
| m2osw tableofcontents | = 6.x-3.6 | No fix listed |
| m2osw tableofcontents | = 6.x-3.7 | No fix listed |
| m2osw tableofcontents | = 6.x-3.x-dev | No fix listed |
References
- drupal.org patch
- drupal.org patch vendor-advisory
- [oss-security] 20121128 Re: CVE request for Drupal contributed modules mailing-list