CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
Percentile
99.7%
Node Hierarchy module allows for the creation of parent child relationships among nodes that can create a tree-like hierarchy of content.
The module doesn’t sufficiently confirm user intent when reordering children nodes allowing a malicious user to trick a site admin to changing the desired hierarchy.
CVE: CVE-2012-2728
Drupal core is not affected. If you do not use the contributed Node Hierarchy module, there is nothing you need to do.
Install the latest version:
Also see the Node Hierarchy project page.