CVE-2013-0257

2022-10-0316:15:03

redhat

www.cve.org

cve-2013-0257

email2image

drupal

access restriction

remote attackers

user email addresses

email fields

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.5%

JSON

The email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes, which allows remote attackers to read images of user email addresses and email fields.

References

drupal.org/node/1903264

www.openwall.com/lists/oss-security/2013/02/05/1