Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8pfc-m884-fgm5

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler.

The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler.

EPSS

Процентиль: 52%
0.00294
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 10 лет назад

The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler.

EPSS

Процентиль: 52%
0.00294
Низкий

Дефекты

CWE-200