CVE

Id
58895  
CVE No.
CVE-2012-5652  
Status
Candidate  
Description
Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
602296 58895 CVE-2012-5652 MLIST:[oss-security] 20121219 Re: CVE request for Drupal core, and contributed modules  View
602297 58895 CVE-2012-5652 URL:http://www.openwall.com/lists/oss-security/2012/12/20/1  View
602298 58895 CVE-2012-5652 CONFIRM:http://drupal.org/SA-CORE-2012-004  View
602299 58895 CVE-2012-5652 CONFIRM:http://drupalcode.org/project/drupal.git/commitdiff/da8023a  View
602300 58895 CVE-2012-5652 DEBIAN:DSA-2776  View
602301 58895 CVE-2012-5652 URL:http://www.debian.org/security/2013/dsa-2776  View
602302 58895 CVE-2012-5652 BID:56993  View
602303 58895 CVE-2012-5652 URL:http://www.securityfocus.com/bid/56993  View
602304 58895 CVE-2012-5652 OSVDB:88527  View
602305 58895 CVE-2012-5652 URL:http://osvdb.org/88527  View
602306 58895 CVE-2012-5652 SECUNIA:51517  View
602307 58895 CVE-2012-5652 URL:http://secunia.com/advisories/51517  View
602308 58895 CVE-2012-5652 XF:drupal-upload-information-disclosure(80794)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20993 JVNDB-2013-002568 Zend Framework の Zend_Feed における任意のファイルを読まれる脆弱性 Zend Framework の Zend_Feed 内の (1) Zend_Feed_Rss および (2) Zend_Feed_Atom クラスには、任意のファイルを読まれる、任意の HTTP リクエストをイントラネットサーバに送信される、およびサービス運用妨害 (CPU およびメモリ破損) 状態となる脆弱性が存在します。 CVE-2012-5657 58895 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002568.html  View