PT-2012-3937

Name of the Vulnerable Software and Affected Versions Linkit module versions 7.x-2.x before 7.x-2.3 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors because it does not check permissions when searching for entities, specifically when using an...

SA-CONTRIB-2012-067 - Linkit - Access bypass

CVE: CVE-2012-2304 Linkitprovides an easy interface for internal and external linking. Linkit links to nodes, users, managed files, terms and have basic support for all entities by default, using an autocomplete field. When searching for entities, no access restrictions were added and users may s...