Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-4488
5
MEDIUMCVSS v2
Published
October 31, 2012
Affected
3 projects
Assigned by
Red Hat
Severity scale
010
Description
The Location module 6.x before 6.x-3.2 and 7.x before 7.x-3.0-alpha1 for Drupal does not properly check user or node access permissions, which allows remote attackers to read node or user results via the location search page.
location
NPMA Browser-esque location object
NPMA Browser-esque location object= 6.x-3.0, = 6.x-3.1, = 6.x-3.x, = 7.x-1.0, = 7.x-3.x, = 7.x-4.x, = 7.x-5.xNVD
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.all versionsNVD