Code injection

2011-03-2322:00:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.7%

JSON

The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node access logic, which allows remote attackers to discover restricted node titles and relationships.

CPENameOperatorVersion
relevant_contenteq5.120.10
relevant_contenteq5.120.11
relevant_contenteq5.120.12
relevant_contenteq5.120.13
relevant_contenteq5.0.0-x1-xdev
relevant_contenteq6.120.10
relevant_contenteq6.120.11
relevant_contenteq6.120.12
relevant_contenteq6.120.13
relevant_contenteq6.120.14

Name	Operator	Version
relevant_content	eq	5.120.10
relevant_content	eq	5.120.11
relevant_content	eq	5.120.12
relevant_content	eq	5.120.13
relevant_content	eq	5.0.0-x1-xdev
relevant_content	eq	6.120.10
relevant_content	eq	6.120.11
relevant_content	eq	6.120.12
relevant_content	eq	6.120.13
relevant_content	eq	6.120.14

Rows per page:

1-10 of 111

References

osvdb.org/69368

secunia.com/advisories/42228

www.securityfocus.com/bid/44932

drupal.org/node/974668

drupal.org/node/974672

drupal.org/node/975094

exchange.xforce.ibmcloud.com/vulnerabilities/63331