CVE-2013-1925

The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the…

published July 16, 2013

CVSS
—
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read restricted node titles via an autocomplete list.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01772 · 77.9th percentile
Published
2013-07-16T18:00Z
EPSS history
Timeline
  • 16 JUL 18:00Z
    The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the…
    cvelistv5