CVE-2015-4375

The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an autocomplete search…

published June 15, 2015

CVSS
—
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an autocomplete search on custom entities without an access query tag or (2) leveraging knowledge of the ID of an entity.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01204 · 67.8th percentile
Published
2015-06-15T14:00Z
EPSS history
Timeline
  • 15 JUN 14:00Z
    The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an autocomplete search…
    cvelistv5