QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2012-2724

Back to search

CVE-2012-2724

Published: Jan 9, 2020

Modified: Aug 6, 2024

PUBLISHED

Description

The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is required, which allows remote attackers to obtain sensitive information via the confirmation page.

VendorProductVersions

Simplenews

Simplenews

affected
6.x-1.x before 6.x-1.4
affected
6.x-2.x before 6.x-2.0-alpha4
affected
and 7.x-1.x before 7.x-1.0-rc1

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now