CVE-2012-1056

MITTEL 5.0CVE-2012-1056 · Published 14/02/2012 · updated 16/06/2026

Kurz gesagt

CVE-2012-1056 ist eine Schwachstelle (MITTEL (CVSS 5.0)) in forward (sean robertson).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.5%, höher als bei 73.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
forward sean_robertson	`= 6.x-1.0= 6.x-1.1= 6.x-1.10= 6.x-1.11= 6.x-1.12= 6.x-1.13= 6.x-1.14= 6.x-1.15= 6.x-1.16= 6.x-1.17= 6.x-1.18= 6.x-1.19= 6.x-1.2= 6.x-1.20= 6.x-1.3= 6.x-1.4= 6.x-1.5= 6.x-1.6= 6.x-1.7= 6.x-1.8= 6.x-1.9= 6.x-1.x-dev= 7.x-1.0= 7.x-1.1= 7.x-1.2= 7.x-1.x-dev`	No fix yet

Description

The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors.

References

drupal.org/node/1423722 · Patch
drupal.org/node/1425150 · Patch
osvdb.org/78817
secunia.com/advisories/47851 · Vendor Advisory
securityfocus.com/bid/51826
exchange.xforce.ibmcloud.com/vulnerabilities/72920

Weitere Schwachstellen in forward

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free