| Package | Affected versions | Patched versions |
|---|---|---|
| storm | = 6.x-1.0= 6.x-1.1= 6.x-1.10= 6.x-1.11= 6.x-1.12= 6.x-1.13= 6.x-1.14= 6.x-1.15= 6.x-1.16= 6.x-1.17= 6.x-1.18= 6.x-1.19= 6.x-1.2= 6.x-1.20= 6.x-1.21= 6.x-1.22= 6.x-1.23= 6.x-1.24= 6.x-1.3= 6.x-1.4= 6.x-1.5= 6.x-1.6= 6.x-1.7= 6.x-1.8= 6.x-1.9= 6.x-1.x |
The Storm module 6.x before 6.x-1.25 for Drupal does not enforce privilege requirements for storminvoiceitem nodes, which allows remote attackers to read node titles via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free