CVEvulnerability
CVE-2015-5499
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-08-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify custom widgets and create widget database records by leveraging the "navigate view" permission.
Affected configurations
• navigate project navigate
Related
Weakness · not in database (1)
References
- http://www.openwall.com/lists/oss-security/2015/07/04/4 www.openwall.com
- https://www.drupal.org/node/2492245 Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2015/07/04/4 www.openwall.com
- https://www.drupal.org/node/2492245 Patch, Vendor Advisory