CVE-2007-1368

CVE-2007-1368 concerns Drupal’s Project issue tracking module. The advisory notes that versions before 4.7.x-1.3, 4.7.x-2.* before 4.7.x-2.3, and 5 before 5.x-0.2-beta allow remote authenticated users (with the “access project issues” permission) to read the contents of a private node by requesti...