Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2gh6-8p4x-h863

Опубликовано: 05 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to cached pages, which allows remote attackers with the same role-combination as the superuser to obtain sensitive information via the cached pages of the superuser.

The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to cached pages, which allows remote attackers with the same role-combination as the superuser to obtain sensitive information via the cached pages of the superuser.

EPSS

Процентиль: 46%
0.00235
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
nvd
почти 6 лет назад

The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to cached pages, which allows remote attackers with the same role-combination as the superuser to obtain sensitive information via the cached pages of the superuser.

EPSS

Процентиль: 46%
0.00235
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862