Back to search
CVE-2013-1925
Published: Jul 16, 2013
Modified: Aug 6, 2024
PUBLISHED
Description
The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read restricted node titles via an autocomplete list.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://drupal.org/node/1960406
x_refsource_MISC
91986
vdb-entry
x_refsource_OSVDB
drupal-chaostool-node-security-bypass(83254)
vdb-entry
x_refsource_XF
https://drupal.org/node/1960424
x_refsource_CONFIRM
20130403 [Security-news] SA-CONTRIB-2013-041 - Chaos tool suite (ctools) - Access bypass
mailing-list
x_refsource_FULLDISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now