CVE-2012-5589

2012-12-2617:00:00

redhat

www.cve.org

drupal

multilink module

permissions

remote authenticated users

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

49.0%

JSON

The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissions when generating an in-content link, which allows remote authenticated users with text-editing permissions to read arbitrary node titles via a generated link.