CVE-2012-2724

Katalog CVE

CVSS 5.3 · Medium EPSS 2,5%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada md-systems simplenews. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is required, which allows remote attackers to obtain sensitive information via the confirmation page.

Rincian

Terbit di NVD

9 Januari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

2,5% peluang dieksploitasi; lebih tinggi dari 83,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://drupal.org/node/1619812 advisory pihak ketiga
• http://drupal.org/node/1619818 advisory pihak ketiga
• http://drupal.org/node/1619820 advisory pihak ketiga
• http://drupal.org/node/1619848 advisory pihak ketiga
• http://drupalcode.org/project/simplenews.git/commitdiff/36352c1 permissions required · advisory pihak ketiga
• http://drupalcode.org/project/simplenews.git/commitdiff/6d5704c permissions required · advisory pihak ketiga
• http://drupalcode.org/project/simplenews.git/commitdiff/faec6a6 permissions required · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2012/06/14/3 mailing list · advisory pihak ketiga
• http://www.securityfocus.com/bid/53839 advisory pihak ketiga · vdb entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76143 advisory pihak ketiga · vdb entry