CVE-2012-2922

The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to…

published May 21, 2012

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02974 · 87.1th percentile
Published
2012-05-21T22:00Z
EPSS history
Timeline
  • 21 MAY 22:00Z
    The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to…
    cvelistv5