AI Score
Confidence
Low
EPSS
Percentile
68.9%
The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit permissions to a node that references a private node.
drupal.org/node/2140229
drupal.org/node/2140237