Description (CNA)
The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/47851
- http://drupal.org/node/1425150
- http://www.securityfocus.com/bid/51826
- http://drupal.org/node/1423722
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72920
- http://osvdb.org/78817
ADP enrichment
No English description supplied.