CVE-2012-1590

Drupal core contains an access-bypass in forum listing (CVE-2012-1590): when displaying the forum overview, unpublished nodes’ metadata (e.g., post titles) could be exposed to users who should not have access. Affected products/versions: Drupal core 7.x prior to 7.13 (per Drupal SA-CORE-2012-002)...

SA-CORE-2012-002 - Drupal core multiple vulnerabilities

Denial of Service CVE: CVE-2012-1588 Drupal core's text filtering system provides several features including removing inappropriate HTML tags and automatically linking content that appears to be a link. A pattern in Drupal's text matching was found to be inefficient with certain specially crafted...