Lucene search

[email protected]CVE-2012-5654

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-5654

2022-10-0316:15:30

CWE-200

[email protected]

web.nvd.nist.gov

cve-2012-5654

nodewords

d6 meta tags

drupal

information security

vulnerability

remote attackers

sensitive information

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.8%

JSON

The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags.

Affected configurations

NVD

Node

nodewords_projectnodewordsRange≤6.x-1.14beta2

nodewords_projectnodewordsMatch4.7-1.0

nodewords_projectnodewordsMatch4.7-1.1

nodewords_projectnodewordsMatch4.7-1.2

nodewords_projectnodewordsMatch4.7-1.xdev

nodewords_projectnodewordsMatch5.x-1.0

nodewords_projectnodewordsMatch5.x-1.2

nodewords_projectnodewordsMatch5.x-1.3

nodewords_projectnodewordsMatch5.x-1.4

nodewords_projectnodewordsMatch5.x-1.5

nodewords_projectnodewordsMatch5.x-1.7

nodewords_projectnodewordsMatch5.x-1.8

nodewords_projectnodewordsMatch5.x-1.8rc1

nodewords_projectnodewordsMatch5.x-1.9

nodewords_projectnodewordsMatch5.x-1.10

nodewords_projectnodewordsMatch5.x-1.11

nodewords_projectnodewordsMatch5.x-1.12

nodewords_projectnodewordsMatch5.x-1.13

nodewords_projectnodewordsMatch5.x-1.xdev

nodewords_projectnodewordsMatch6.x-1.0

nodewords_projectnodewordsMatch6.x-1.0rc1

nodewords_projectnodewordsMatch6.x-1.1

nodewords_projectnodewordsMatch6.x-1.2

nodewords_projectnodewordsMatch6.x-1.3

nodewords_projectnodewordsMatch6.x-1.3alpha1

nodewords_projectnodewordsMatch6.x-1.3alpha2

nodewords_projectnodewordsMatch6.x-1.3beta3

nodewords_projectnodewordsMatch6.x-1.3beta4

nodewords_projectnodewordsMatch6.x-1.3beta5

nodewords_projectnodewordsMatch6.x-1.4

nodewords_projectnodewordsMatch6.x-1.5

nodewords_projectnodewordsMatch6.x-1.6

nodewords_projectnodewordsMatch6.x-1.7

nodewords_projectnodewordsMatch6.x-1.8

nodewords_projectnodewordsMatch6.x-1.9

nodewords_projectnodewordsMatch6.x-1.10

nodewords_projectnodewordsMatch6.x-1.11

nodewords_projectnodewordsMatch6.x-1.12beta1

nodewords_projectnodewordsMatch6.x-1.12beta2

nodewords_projectnodewordsMatch6.x-1.12beta3

nodewords_projectnodewordsMatch6.x-1.12beta4

nodewords_projectnodewordsMatch6.x-1.12beta5

nodewords_projectnodewordsMatch6.x-1.12beta6

nodewords_projectnodewordsMatch6.x-1.12beta7

nodewords_projectnodewordsMatch6.x-1.12beta8

nodewords_projectnodewordsMatch6.x-1.12beta9

nodewords_projectnodewordsMatch6.x-1.12rc1

nodewords_projectnodewordsMatch6.x-1.13

nodewords_projectnodewordsMatch6.x-1.13rc1

nodewords_projectnodewordsMatch6.x-1.13rc2

nodewords_projectnodewordsMatch6.x-1.14beta1

nodewords_projectnodewordsMatch6.x-1.xdev

AND

drupaldrupalMatch-

CPENameOperatorVersion
nodewords_project:nodewordsnodewords project nodewordsle6.x-1.14
nodewords_project:nodewordsnodewords project nodewordseq4.7-1.0
nodewords_project:nodewordsnodewords project nodewordseq4.7-1.1
nodewords_project:nodewordsnodewords project nodewordseq4.7-1.2
nodewords_project:nodewordsnodewords project nodewordseq4.7-1.x
nodewords_project:nodewordsnodewords project nodewordseq5.x-1.0
nodewords_project:nodewordsnodewords project nodewordseq5.x-1.2
nodewords_project:nodewordsnodewords project nodewordseq5.x-1.3
nodewords_project:nodewordsnodewords project nodewordseq5.x-1.4
nodewords_project:nodewordsnodewords project nodewordseq5.x-1.5

CPE	Name	Operator	Version
nodewords_project:nodewords	nodewords project nodewords	le	6.x-1.14
nodewords_project:nodewords	nodewords project nodewords	eq	4.7-1.0
nodewords_project:nodewords	nodewords project nodewords	eq	4.7-1.1
nodewords_project:nodewords	nodewords project nodewords	eq	4.7-1.2
nodewords_project:nodewords	nodewords project nodewords	eq	4.7-1.x
nodewords_project:nodewords	nodewords project nodewords	eq	5.x-1.0
nodewords_project:nodewords	nodewords project nodewords	eq	5.x-1.2
nodewords_project:nodewords	nodewords project nodewords	eq	5.x-1.3
nodewords_project:nodewords	nodewords project nodewords	eq	5.x-1.4
nodewords_project:nodewords	nodewords project nodewords	eq	5.x-1.5

Rows per page:

1-10 of 331

References

drupal.org/node/1859208

drupal.org/node/1859282

www.openwall.com/lists/oss-security/2012/12/20/1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.8%

JSON

Related for CVE-2012-5654

cvelist1 nvd1 prion1 drupal1