CVE-2012-2073

The CVE-2012-2073 entry concerns the Drupal contributed Bundle copy module (7.x-1.x) prior to version 7.x-1.1. The root cause is that the module does not sufficiently check the user permission “use PHP for settings” during settings import, enabling remote authenticated users with certain permissi...