CVE-2012-1591

The image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivative image styles of private images, which allows remote…

published October 1, 2012

CVSS
—
EPSS
2%
Percentile
83.8
In the wild
Unconfirmed
What it is

The image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivative image styles of private images, which allows remote attackers to read private image styles.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02401 · 83.8th percentile
Published
2012-10-01T00:00Z
EPSS history
Timeline
  • 01 OCT 00:00Z
    The image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivative image styles of private images, which allows remote…
    cvelistv5