CVE-2012-5652

Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result

published January 3, 2013

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02436 · 84.1th percentile
Published
2013-01-03T01:00Z
EPSS history
Timeline
  • 03 JAN 01:00Z
    Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result
    cvelistv5