Netgenius : Security Vulnerabilities, CVEs,
The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissions when generating an in-content link, which allows remote authenticated users with text-editing permissions to read arbitrary node titles via a generated link.
Max CVSS
3.5
EPSS Score
0.16%
Published
2012-12-26
Updated
2012-12-27
1 vulnerabilities found