Design/Logic Flaw

2014-08-0618:55:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.0%

JSON

The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) nodes or (2) users, which allows remote attackers to obtain sensitive information via a crafted link.

References

www.securityfocus.com/bid/68861

exchange.xforce.ibmcloud.com/vulnerabilities/94870

www.drupal.org/node/2308503