Unscored severity · published Oct 1, 2012
CVE-2012-1591
The image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivative image styles of private images, which allows remote attackers to read…
–
CVSS
2.4%
EPSS
No
On KEV
Description
The image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivative image styles of private images, which allows remote attackers to read private image styles.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DR
Drupal · Drupal
7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +24 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1591
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1591
Patch
http://drupal.org/drupal-7.14
drupal.org
http://drupal.org/node/1507988
Vendor Advisory
http://drupal.org/node/1557938
drupalcode.org
http://drupalcode.org/project/drupal.git/commit/3bf6761ff7537dc68e22ea73f155134f3cfd41a8
secunia.com
http://secunia.com/advisories/49012
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2013:074
More from Drupal
9.8
CVE-2026-9082
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
9.8
CVE-2018-7602
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
9.8
CVE-2018-7600
Drupal Core Remote Code Execution Vulnerability
8.8
CVE-2020-13671
Drupal core Un-restricted Upload of File
8.1
CVE-2019-6340
Drupal core - Highly critical - Remote Code Execution