CVE-2015-3391 The Path Breadcrumbs module before 7.x-3.2 for Drupal allows remote attackers to bypass intended access restrictions and obtain sensitive node titles by reading a 403 Not Found page.
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Path Breadcrumbs module before 7.x-3.2 for Drupal allows remote attackers to bypass intended access restrictions and obtain sensitive node titles by reading a 403 Not Found page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| path breadcrumbs project path breadcrumbs | <= 7.x-3.1 | No fix listed |
References
- [oss-security] 20150205 CVE requests for Drupal contributed modules mailing-list
- 72569 vdb-entry
- pathbreadcrum-drupal-node-sec-bypass(100672) vdb-entry
- www.drupal.org patch
- www.drupal.org patch vendor-advisory