Unscored CVE-2013-0257 EUVD-2013-0287GHSA-j2h9-g6rp-2vj3

The email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes, which allows remote attackers to read ima…

Published Mar 27, 2013 · Updated Sep 17, 2024 · Assigned by redhat

Description

The email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes, which allows remote attackers to read images of user email addresses and email fields.

References

http://drupal.org/node/1903264
[oss-security] 20130204 Re: CVE request for Drupal contributed modules mailing-list