Description

The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.

Remediation

References

CVE-2016-9449

Related Vulnerabilities

WordPress Plugin Top 10-Popular posts for WordPress Multiple Vulnerabilities (3.2.3)

Joomla! Core Security Bypass (1.6.0 - 3.9.24)

WordPress Plugin Convert Plus Security Bypass (3.4.4)

Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-6817)

WordPress Plugin LOGOSWARE SUITE Uploader Arbitrary File Upload (1.1.6)

Severity

Medium

Classification

CVE-2016-9449 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities