Описание
The Token Insert Entity module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote authenticated users with certain permissions to bypass intended access restrictions and possibly obtain sensitive information by inserting a token, which embeds a rendered entity in the main node.
Ссылки
- Patch
- PatchVendor Advisory
- Patch
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:token_insert_entity_project:token_insert_entity:7.x-1.0:*:*:*:*:drupal:*:*
EPSS
Процентиль: 31%
0.00118
Низкий
3.5 Low
CVSS2
Дефекты
CWE-200
Связанные уязвимости
github
больше 3 лет назад
The Token Insert Entity module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote authenticated users with certain permissions to bypass intended access restrictions and possibly obtain sensitive information by inserting a token, which embeds a rendered entity in the main node.
EPSS
Процентиль: 31%
0.00118
Низкий
3.5 Low
CVSS2
Дефекты
CWE-200