CVE-2012-2082

概要

参考情報

• drupal.org/node/1507412 · Patch
• drupal.org/node/1507466 · Patch
• drupalcode.org/project/ctools.git/commit/755b3c4 · Patch
• osvdb.org/80679
• secunia.com/advisories/48616 · Vendor Advisory
• openwall.com/lists/oss-security/2012/04/07/1
• securityfocus.com/bid/52794
• exchange.xforce.ibmcloud.com/vulnerabilities/74481

ctools のその他の脆弱性

• CVE-2015-7875高 7.5ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins tha…
• CVE-2015-6665中 4.3Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Dru…
• CVE-2015-4398中 5.8Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drupal allows remote atta…
• CVE-2015-4375中 4.3The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an au…
• CVE-2013-1925低 3.5The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authentic…