Unscored severity · published Oct 31, 2012
CVE-2012-4483
The commons_discussion_views_default_views function in modules/features/commons_discussion/commons_discussion.views_default.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8…
–
CVSS
1.4%
EPSS
No
On KEV
Description
The commons_discussion_views_default_views function in modules/features/commons_discussion/commons_discussion.views_default.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensitive information via the recent comments listing.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Commons · Acquia
6.x-2.4; 6.x-2.5; 6.x-2.6; 6.x-2.7; 6.x-2.x · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4483
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4483
drupal.org
http://drupal.org/node/1679820
Patch
http://drupal.org/node/1679908
Patch
http://drupalcode.org/project/commons.git/commitdiff/8ef688b
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/10/04/6
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/10/07/1
More from Commons
–
CVE-2013-1908
The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to…
–
CVE-2013-1907
The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to…