Drupal Dynamic display block module security bypass vulnerability

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.Dynamic display block is one of the featured content slideshow modules. A security vulnerability exists in the Drupal Dynamic display block module in versions 7.x-1.1 and earlier. A...

CVE-2015-5491: Exposure of Sensitive Information to an Unauthorized Actor

The Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users to bypass intended access restrictions and read sensitive titles by leveraging the "administer ddblock" permission...

PT-2015-6943

Name of the Vulnerable Software and Affected Versions Dynamic display block module versions 7.x-1.x before 7.x-1.1 Description The issue allows remote authenticated users to bypass intended access restrictions and read sensitive titles by leveraging the administer ddblock permission...