CVE-2012-5588

The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or…

published December 26, 2012

CVSS
—
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or teaser display mode, does not properly check permissions, which allows remote attackers to email the stored address via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01162 · 66.7th percentile
Published
2012-12-26T17:00Z
EPSS history
Timeline
  • 26 DEC 17:00Z
    The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or…
    cvelistv5