CVE-2012-2304

MEDIUM 4.3CVE-2012-2304 · Published 14/08/2012 · updated 16/06/2026

In short

CVE-2012-2304 is a MEDIUM (CVSS 4.3) vulnerability affecting linkit (emil stjerneman).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
linkit emil_stjerneman	`= 7.x-2.0= 7.x-2.1= 7.x-2.2= 7.x-2.3`	No fix yet

Description

The Linkit module 7.x-2.x before 7.x-2.3 for Drupal, when using an entity access module, does not check permissions when searching for entities, which allows remote attackers to obtain sensitive information via unspecified vectors.

References

drupal.org/node/1547716 · Patch
drupal.org/node/1547738 · Vendor Advisory
secunia.com/advisories/48900 · Vendor Advisory
openwall.com/lists/oss-security/2012/05/03/1
openwall.com/lists/oss-security/2012/05/03/2
osvdb.org/81557
securityfocus.com/bid/53253
exchange.xforce.ibmcloud.com/vulnerabilities/75183

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free