low3.5
CVE-2015-5491
The Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users to bypass intended access restrictions and read sensitive …
Impact
The Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users to bypass intended access restrictions and read sensitive titles by leveraging the "administer ddblock" permission.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dynamic Display Block Project | Dynamic Display Block | Versions 7.x-1.0, 7.x-1.x |