medium4.3
CVE-2013-7066
The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit permissions to a node…
Impact
The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit permissions to a node that references a private node.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Entity Reference Project | Entityreference | Versions 7.x-1.0, 7.x-1.x |