CVEvulnerability

CVE-2012-1056

5.0 MEDIUM Published 2012-02-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-02-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-264

Description

The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors.

Affected configurations

• sean robertson forward 6.x-1.0 • sean robertson forward 6.x-1.1 • sean robertson forward 6.x-1.2 • sean robertson forward 6.x-1.3 • sean robertson forward 6.x-1.4 • sean robertson forward 6.x-1.5 • sean robertson forward 6.x-1.6 • sean robertson forward 6.x-1.7 • sean robertson forward 6.x-1.8 • sean robertson forward 6.x-1.9 • sean robertson forward 6.x-1.10 • sean robertson forward 6.x-1.11 • sean robertson forward 6.x-1.12 • sean robertson forward 6.x-1.13 • sean robertson forward 6.x-1.14 • sean robertson forward 6.x-1.15 • sean robertson forward 6.x-1.16 • sean robertson forward 6.x-1.17 • sean robertson forward 6.x-1.18 • sean robertson forward 6.x-1.19 • sean robertson forward 6.x-1.20 • sean robertson forward 6.x-1.x-dev • sean robertson forward 7.x-1.0 • sean robertson forward 7.x-1.1 • sean robertson forward 7.x-1.2 • sean robertson forward 7.x-1.x-dev

Related

Weakness · not in database (1)

References