Unscored CVE-2015-3391 EUVD-2015-3436GHSA-v6r7-7j52-94w6

The Path Breadcrumbs module before 7.x-3.2 for Drupal allows remote attackers to bypass intended access restrictions and obtain sensitive n…

Published Apr 21, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

The Path Breadcrumbs module before 7.x-3.2 for Drupal allows remote attackers to bypass intended access restrictions and obtain sensitive node titles by reading a 403 Not Found page.

References

72569 vdb-entry
https://www.drupal.org/node/2420139
pathbreadcrum-drupal-node-sec-bypass(100672) vdb-entry
[oss-security] 20150205 CVE requests for Drupal contributed modules mailing-list
https://www.drupal.org/node/2420121