GitHub Advisoryadvisory · Packagist
GHSA-rfxx-gxwc-923c Drupal Views can allow unauthorized users to see Statistics information
MEDIUM
Official page ↗
- Aliases
- CVE-2016-6212
- Ecosystem
- Packagist
- Packages
- drupal/core, drupal/drupal
- Severity
- Moderate
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-200
- Reviewed
- 2024-04-23
Affected packages
• Packagist drupal/core: >= 8.0, < 8.1.3 → fixed in 8.1.3
• Packagist drupal/drupal: >= 8.0, < 8.1.3 → fixed in 8.1.3
Description
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors.
Related
Alias · CVE (1)
- CVE-2016-6212 The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated… vulnerability
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2016-6212 advisory
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2016-6212.yaml web
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2016-6212.yaml web
- https://github.com/drupal/core package
- https://www.drupal.org/SA-CORE-2016-002 web
- https://www.drupal.org/node/2749333 web
- http://www.openwall.com/lists/oss-security/2016/07/13/4 web
- http://www.openwall.com/lists/oss-security/2016/07/13/7 web
- http://www.securityfocus.com/bid/91230 web