CVE-2012-4477: Medium severity David Alkire Drag \& Drop Gallery vulnerability
Published Nov 30, 2012
·Updated
Unspecified vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to bypass access restrictions via unknown attack vectors.
Affected Software
2 affected components
David Alkire Drag \& Drop Gallery=6.x-1.5
Drupal Drupal
Remediation
Patch Available
Event History
Nov 30, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4477?
CVE-2012-4477 is considered a medium severity vulnerability that allows unauthorized access.
2
How do I fix CVE-2012-4477?
To fix CVE-2012-4477, update the Drag & Drop Gallery module to version 6.x-1.6 or later.
3
Who is affected by CVE-2012-4477?
CVE-2012-4477 specifically affects users of the Drag & Drop Gallery module version 6.x-1.5 in Drupal.
4
What type of attack vector does CVE-2012-4477 utilize?
CVE-2012-4477 utilizes unspecified attack vectors to bypass access restrictions.
5
Is the core Drupal software affected by CVE-2012-4477?
No, the core Drupal software is not affected, only the Drag & Drop Gallery module version 6.x-1.5.