CVE-2013-5965

The Node View Permissions module 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the hook_query_alter function, which might allow remote attackers to obtain sensitive information by reading a node listing.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2013-09-30

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Node View Permissions (Adcisolutions)

References

• http://archives.neohapsis.com/archives/bugtraq/2013-08/0184.html
• http://secunia.com/advisories/54550
• http://www.openwall.com/lists/oss-security/2013/09/11/9
• https://drupal.org/node/2031621
• https://drupal.org/node/2076315