CVE-2012-2722

The CVE-2012-2722 issue affects the Drupal Node Embed module (CKEditor-based node picker). The vulnerability is a permissions-check bypass in the node selection interface, allowing remote readers to view node titles without proper access. Affected versions are Node Embed 6.x-1.x before 6.x-1.5 an...

SA-CONTRIB-2012-093 - Node Embed - Access Bypass

Node Embed gives content editors an interface for selecting and embedding nodes using a WYSIWYG editor. The interface for selecting nodes is a page that had no access check, allowing users to view node titles they might not have access to. This issue only affects your site if you have unpublished...