Description
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors.
Unscored
CVE-2012-4471
EUVD-2012-4400GHSA-hcq3-r7cj-wgm8
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows r…
Published Nov 30, 2012 · Updated Aug 6, 2024 · Assigned by redhat