CVE-2012-4470 in Listhandler
Résumé (Anglaise)
The Listhandler module 6.x-1.x before 6.x-1.1 for Drupal does not properly check permissions when importing emails, which allows remote comment authors to bypass access restrictions and possibly have other unspecified impact.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Réserver
21/08/2012
Divulgation
30/11/2012
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 63093 | Philip Ludlam Listhandler Access Restriction élévation de privilèges | 264 | Non défini | Correctif officiel | CVE-2012-4470 |