CVE-2012-2304

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.10%

Published

Aug 14, 2012

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Linkit module 7.x-2.x before 7.x-2.3 for Drupal, when using an entity access module, does not check permissions when searching for entities, which allows remote attackers to obtain sensitive information via unspecified vectors.

Weaknesses (CWE)

CWE-264

Affected Products (7)

emil_stjerneman · linkitvulnerable

drupal · drupal

References (16)

http://drupal.org/node/1547716

Patch

http://drupal.org/node/1547738

Vendor Advisory

http://secunia.com/advisories/48900

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/05/03/1

http://www.openwall.com/lists/oss-security/2012/05/03/2

http://www.osvdb.org/81557

http://www.securityfocus.com/bid/53253

https://exchange.xforce.ibmcloud.com/vulnerabilities/75183

http://drupal.org/node/1547716

Patch

http://drupal.org/node/1547738

Vendor Advisory

http://secunia.com/advisories/48900

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/05/03/1

http://www.openwall.com/lists/oss-security/2012/05/03/2

http://www.osvdb.org/81557

http://www.securityfocus.com/bid/53253

https://exchange.xforce.ibmcloud.com/vulnerabilities/75183

KEV Catalog EPSS Scores Vendors All CVEs