CVE-2015-3391

MEDIUM 5.0CVE-2015-3391 · Published 21/04/2015 · updated 17/06/2026

In short

CVE-2015-3391 is a MEDIUM (CVSS 5.0) vulnerability affecting path breadcrumbs (path breadcrumbs project).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
path breadcrumbs path_breadcrumbs_project	`≤ 7.x-3.1`	No fix yet

Description

The Path Breadcrumbs module before 7.x-3.2 for Drupal allows remote attackers to bypass intended access restrictions and obtain sensitive node titles by reading a 403 Not Found page.

References

openwall.com/lists/oss-security/2015/02/05/16
securityfocus.com/bid/72569
exchange.xforce.ibmcloud.com/vulnerabilities/100672
drupal.org/node/2420121 · Patch
drupal.org/node/2420139 · Patch

More vulnerabilities in path breadcrumbs

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free