CVEvulnerability
CVE-2012-5654
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-01-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags.
Affected configurations
• nodewords project nodewords (<= 6.x-1.14)
• nodewords project nodewords 4.7-1.0
• nodewords project nodewords 4.7-1.1
• nodewords project nodewords 4.7-1.2
• nodewords project nodewords 4.7-1.x
• nodewords project nodewords 5.x-1.0
• nodewords project nodewords 5.x-1.2
• nodewords project nodewords 5.x-1.3
• nodewords project nodewords 5.x-1.4
• nodewords project nodewords 5.x-1.5
• nodewords project nodewords 5.x-1.7
• nodewords project nodewords 5.x-1.8
• nodewords project nodewords 5.x-1.9
• nodewords project nodewords 5.x-1.10
• nodewords project nodewords 5.x-1.11
• nodewords project nodewords 5.x-1.12
• nodewords project nodewords 5.x-1.13
• nodewords project nodewords 5.x-1.x
• nodewords project nodewords 6.x-1.0
• nodewords project nodewords 6.x-1.1
• nodewords project nodewords 6.x-1.2
• nodewords project nodewords 6.x-1.3
• nodewords project nodewords 6.x-1.4
• nodewords project nodewords 6.x-1.5
• nodewords project nodewords 6.x-1.6
• nodewords project nodewords 6.x-1.7
• nodewords project nodewords 6.x-1.8
• nodewords project nodewords 6.x-1.9
• nodewords project nodewords 6.x-1.10
• nodewords project nodewords 6.x-1.11
• nodewords project nodewords 6.x-1.12
• nodewords project nodewords 6.x-1.13
• nodewords project nodewords 6.x-1.14
• nodewords project nodewords 6.x-1.x
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://drupal.org/node/1859208 Patch
- http://drupal.org/node/1859282 Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/12/20/1 www.openwall.com
- http://drupal.org/node/1859208 Patch
- http://drupal.org/node/1859282 Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/12/20/1 www.openwall.com