Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-1591
5
MEDIUMCVSS v2
Published
October 1, 2012
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivative image styles of private images, which allows remote attackers to read private image styles.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 7.0, = 7.3, = 7.1, = 7.8, = 7.11, = 7.4, = 7.12, = 7.5, = 7.10, = 7.13, = 7.x-dev, = 7.6, = 7.9, = 7.7, = 7.2NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.= 7.0, = 7.3, = 7.1, = 7.8, = 7.11, = 7.4, = 7.12, = 7.5, = 7.10, = 7.13, = 7.x-dev, = 7.6, = 7.9, = 7.7, = 7.2NVD