Code injection

2013-03-2721:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.5%

JSON

The email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes, which allows remote attackers to read images of user email addresses and email fields.

CPENameOperatorVersion
email2imageeq6.120.1120
email2imageeq6.120.2120

CPE	Name	Operator	Version
	email2image	eq	6.120.1120
	email2image	eq	6.120.2120

References

www.openwall.com/lists/oss-security/2013/02/05/1

drupal.org/node/1903264