Description
The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit permissions to a node that references a private node.
Unscored
CVE-2013-7066
EUVD-2013-6862GHSA-6jf6-56p6-5jpm
The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit p…
Published Apr 29, 2014 · Updated Aug 6, 2024 · Assigned by mitre