CVE-2012-5559

概要

参考情報

• drupal.org/node/1840992 · Patch
• drupal.org/node/1841030 · Patch
• secunia.com/advisories/51259
• openwall.com/lists/oss-security/2012/11/20/4

ctools のその他の脆弱性

• CVE-2015-7875高 7.5ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins tha…
• CVE-2015-6665中 4.3Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Dru…
• CVE-2015-4398中 5.8Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drupal allows remote atta…
• CVE-2015-4375中 4.3The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an au…
• CVE-2013-1925低 3.5The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authentic…