CVE-2012-5652

MEDIUM 5.0CVE-2012-5652 · Published 03/01/2013 · updated 16/06/2026

In short

CVE-2012-5652 is a MEDIUM (CVSS 5.0) vulnerability affecting drupal (drupal).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
drupal drupal	`= 6.0= 6.1= 6.10= 6.11= 6.12= 6.13= 6.14= 6.15= 6.16= 6.17= 6.18= 6.19= 6.2= 6.20= 6.21= 6.22= 6.23= 6.24= 6.25= 6.26= 6.3= 6.4= 6.5= 6.6= 6.7= 6.8= 6.9`	No fix yet

Description

Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.

References

More vulnerabilities in drupal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

drupal

= 6.0= 6.1= 6.10= 6.11= 6.12= 6.13= 6.14= 6.15= 6.16= 6.17= 6.18= 6.19= 6.2= 6.20= 6.21= 6.22= 6.23= 6.24= 6.25= 6.26= 6.3= 6.4= 6.5= 6.6= 6.7= 6.8= 6.9

No fix yet

More vulnerabilities in drupal

See all →