Vulnerability in Freelinking For Case Tracker Project

CVE-2014-5179

The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) nodes or (2) users, which allows remote attackers to obtain sensitive information via a crafted link.

EPSS: 0.012 (64.8th percentile) — read the EPSS interpretation.

Affected products

Freelinking_for_case_tracker_project Freelinking_for_case_tracker
Freelinking_project Freelinking
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)