Code injection

2015-09-1716:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.1%

JSON

The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels.

CPENameOperatorVersion
fieldable_panels_paneseq7.120.14
fieldable_panels_paneseq7.120.13
fieldable_panels_paneseq7.120.11
fieldable_panels_paneseq7.x-1.x dev
fieldable_panels_paneseq7.120.15
fieldable_panels_paneseq7.120.16
fieldable_panels_paneseq7.120.12
fieldable_panels_paneseq7.x-1.0 beta2
fieldable_panels_paneseq7.120.10

Name	Operator	Version
fieldable_panels_panes	eq	7.120.14
fieldable_panels_panes	eq	7.120.13
fieldable_panels_panes	eq	7.120.11
fieldable_panels_panes	eq	7.x-1.x dev
fieldable_panels_panes	eq	7.120.15
fieldable_panels_panes	eq	7.120.16
fieldable_panels_panes	eq	7.120.12
fieldable_panels_panes	eq	7.x-1.0 beta2
fieldable_panels_panes	eq	7.120.10

References

www.drupal.org/node/2561971

www.drupal.org/node/2561981