CVE-2007-3689
The Print module before 4.7-1.0 and 5.x before 5.x-1.2 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.78%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Print module before 4.7-1.0 and 5.x before 5.x-1.2 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL arguments.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N
- EPSS
- 1.78% probability · 77th percentile
- CISA KEV
- Not listed
- Affected
- drupal/print module
- Source
- cve@mitre.org
References
- http://drupal.org/node/152804Patch
- http://drupal.org/node/158029Patch
- http://drupal.org/node/158032Patch
- http://osvdb.org/37897
- http://secunia.com/advisories/25978
- http://www.securityfocus.com/bid/24862
- http://www.vupen.com/english/advisories/2007/2470
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35314
- http://drupal.org/node/152804Patch
- http://drupal.org/node/158029Patch
- http://drupal.org/node/158032Patch
- http://osvdb.org/37897
- http://secunia.com/advisories/25978
- http://www.securityfocus.com/bid/24862
- http://www.vupen.com/english/advisories/2007/2470
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35314
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.