CVE-2012-1056 | BDVDB-2026-49149 Detail

Description#

The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/47851
http://drupal.org/node/1425150
http://www.securityfocus.com/bid/51826
http://drupal.org/node/1423722
https://exchange.xforce.ibmcloud.com/vulnerabilities/72920
http://osvdb.org/78817

Exploit#

No public exploit known

History#

Version 12012-02-14Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.