Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-1590
4
MEDIUMCVSS v2
Published
October 1, 2012
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which allows remote authenticated users to obtain sensitive information such as the post title via the forum overview page.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 7.0, = 7.3, = 7.12, = 7.10, = 7.13, = 7.1, = 7.8, = 7.11, = 7.x-dev, = 7.6, = 7.9, = 7.5, = 7.4, = 7.2, = 7.7NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.= 7.0, = 7.3, = 7.12, = 7.10, = 7.13, = 7.1, = 7.8, = 7.11, = 7.x-dev, = 7.6, = 7.9, = 7.5, = 7.4, = 7.2, = 7.7NVD