Lucene search
K

CVE-2010-1548

🗓️ 21 May 2010 20:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 37 Views🌐 WEB

The auto-complete functionality in the Chaos Tool Suite module for Drupal 6.x before 6.x-1.4 does not follow access restrictions, allowing remote authenticated users to read the title of an unpublished node

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Cvelist
CVE-2010-1548
21 May 201020:00
cvelist
EUVD
EUVD-2010-1575
7 Oct 202500:30
euvd
NVD
CVE-2010-1548
21 May 201020:30
nvd
Prion
Code injection
21 May 201020:30
prion
NVD
Node
OR
chaos_tool_suite_projectctoolsMatch6.x-1.0alpha1drupal
OR
chaos_tool_suite_projectctoolsMatch6.x-1.0alpha2drupal
OR
chaos_tool_suite_projectctoolsMatch6.x-1.0alpha3drupal
OR
chaos_tool_suite_projectctoolsMatch6.x-1.0beta1drupal
OR
chaos_tool_suite_projectctoolsMatch6.x-1.0beta2drupal
OR
chaos_tool_suite_projectctoolsMatch6.x-1.0beta3drupal
OR
chaos_tool_suite_projectctoolsMatch6.x-1.0beta4drupal
OR
chaos_tool_suite_projectctoolsMatch6.x-1.0rc1drupal
OROROROR
chaos_tool_suite_projectctoolsMatch6.x-1.xdevdrupal
ParameterPositionPathDescriptionCWE
qquery paramctools/autocomplete/node/Access control bypass via CTools autocomplete endpoint allowing authenticated users to read titles of unpublished nodes.CWE-264

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Apr 2026 01:13Current
6.4Medium risk
Vulners AI Score6.4
CVSS 23.5
EPSS0.00364
37