CVE-2013-7066

CVE-2013-7066 affects the Drupal contributed module Entity reference (7.x-1.x) . Versions prior to 7.x-1.1-rc1 allow remote attackers to read the titles of private nodes by exploiting edit permissions on a node that references a private node. Root cause: the reference mechanism can disclose priva...