CVE-2012-4499

2022-10-0316:15:34

redhat

www.cve.org

cve-2012-4499

email field module

drupal

remote attackers

email address

entity vulnerability

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.5%

JSON

The contact formatter page in the Email Field module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to email the stored address in the entity via unspecified vectors.

References

drupal.org/node/1761948

drupal.org/node/1761968

drupal.org/node/1762470

www.openwall.com/lists/oss-security/2012/10/04/6

www.openwall.com/lists/oss-security/2012/10/07/1