CVE-2015-3231

The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated users to obtain private content viewed…

published June 22, 2015

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated users to obtain private content viewed by user 1 by reading the cache.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01702 · 76.9th percentile
Published
2015-06-22T19:00Z
EPSS history
Timeline
  • 22 JUN 19:00Z
    The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated users to obtain private content viewed…
    cvelistv5