CVE-2012-4473: Low severity Christian Johansson Restrict Node Page View vulnerability
The Restrict node page view module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "view any node page" or "view any node {type} page" permission to access unpublished nodes via a direct request.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4473?
CVE-2012-4473 is considered a moderate severity vulnerability due to the risk of unauthorized access to unpublished nodes.
How do I fix CVE-2012-4473?
You can fix CVE-2012-4473 by updating the Restrict Node Page View module to version 7.x-1.2 or later.
Who is affected by CVE-2012-4473?
CVE-2012-4473 affects Drupal users who have installed the Restrict Node Page View module versions 7.x-1.0 and 7.x-1.1.
What type of users can exploit CVE-2012-4473?
Remote authenticated users with specific permissions can exploit CVE-2012-4473 to view unpublished content.
Is there a patch available for CVE-2012-4473?
Yes, a patch is available as part of the upgrade to Restrict Node Page View module version 7.x-1.2.