4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.5%
CVE: CVE-2012-0914
The Panels module allows a site administrator to create customized layouts for multiple uses.
The module doesn’t sufficiently sanitize administrator supplied data.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission “administer panel layouts”.
Drupal core is not affected. If you do not use the contributed Panels module, there is nothing you need to do.
Install the latest version:
See also the Panels project page.