Description

The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.

Remediation

References

CVE-2016-9449

Related Vulnerabilities

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2021-4104)

Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13589)

WordPress Plugin Recently Multiple Vulnerabilities (3.0.4)

Squid Improper Input Validation Vulnerability (CVE-2010-0308)

WordPress Plugin Custom CSS Pro Cross-Site Request Forgery (1.0.3)

Severity

Medium

Classification

CVE-2016-9449 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities