CVEvulnerability

CVE-2015-7875

7.5 HIGH Published 2017-08-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-264

Description

ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins that are used on Panels and similar systems to place content and functionality on a page.

Affected configurations

• chaos tool suite project ctools 6.x-1.0 • chaos tool suite project ctools 6.x-1.1 • chaos tool suite project ctools 6.x-1.2 • chaos tool suite project ctools 6.x-1.3 • chaos tool suite project ctools 6.x-1.4 • chaos tool suite project ctools 6.x-1.5 • chaos tool suite project ctools 6.x-1.6 • chaos tool suite project ctools 6.x-1.7 • chaos tool suite project ctools 6.x-1.8 • chaos tool suite project ctools 6.x-1.9 • chaos tool suite project ctools 6.x-1.11 • chaos tool suite project ctools 6.x-1.12 • chaos tool suite project ctools 6.x-1.13 • chaos tool suite project ctools 6.x-1.x • chaos tool suite project ctools 7.x-1.0 • chaos tool suite project ctools 7.x-1.1 • chaos tool suite project ctools 7.x-1.2 • chaos tool suite project ctools 7.x-1.3 • chaos tool suite project ctools 7.x-1.4 • chaos tool suite project ctools 7.x-1.5 • chaos tool suite project ctools 7.x-1.6 • chaos tool suite project ctools 7.x-1.7 • chaos tool suite project ctools 7.x-1.x

Related

Weakness · not in database (1)

References