Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2012-5652 - Vulnerability Database

Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2012-5652

Medium

Reference: CVE-2012-5652

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-5652

Title: Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Overview:

Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.