CVE-2012-1060

概要

参考情報

• drupal.org/node/1431114 · Patch
• drupal.org/node/1433550 · Vendor Advisory
• drupalcode.org/project/revisioning.git/commit/768c882
• secunia.com/advisories/47931 · Vendor Advisory
• madirish.net/content/drupal-revisioning-6x-313-xss-vulnerability · Exploit
• securityfocus.com/bid/51923

revisioning のその他の脆弱性

• CVE-2013-4597中 4.0The Revisioning module 7.x-1.x before 7.x-1.6 for Drupal does not properly check node access permissions for content marked unpublished by t…
• CVE-2012-1635中 6.4The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even wh…