Vulnerability in Drupal

CVE-2012-5651

Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.

EPSS: 0.027 (84.7th percentile) — read the EPSS interpretation.

Affected products

  • Drupal — versions 6.0, 6.1, 6.2
  • N/a — versions n/a

Weakness classification (CWE)

References