Description
The CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal does not properly check access permissions, which allows remote authenticated users to access and change settings by leveraging the "access administration pages" permission.
Unscored
CVE-2015-7306
EUVD-2015-7235GHSA-6qxm-pc52-j488
The CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal does not properly check access permissions, which allows remote authenticated user…
Published Sep 21, 2015 · Updated Sep 16, 2024 · Assigned by mitre