Description
The Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users to bypass intended access restrictions and read sensitive titles by leveraging the "administer ddblock" permission.
Unscored
CVE-2015-5491
EUVD-2015-5446GHSA-4qcj-6h5p-qffv
The Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users to bypass intended access restrictions…
Published Aug 18, 2015 · Updated Aug 6, 2024 · Assigned by mitre