Description
The Scald module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to fields, which allows remote attackers to obtain sensitive atom property information via vectors involving a "debug context."
Unscored
CVE-2015-7305
EUVD-2015-7234GHSA-7q5h-2mrx-v29j
The Scald module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to fields, which allows remote attackers to obtain sen…
Published Sep 21, 2015 · Updated Sep 16, 2024 · Assigned by mitre