CVE-2012-5652: Infoleak
Published Jan 3, 2013
·Updated
Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.
Affected Software
36 affected components
Drupal Drupal=6.0
Drupal Drupal=6.0-beta1
Drupal Drupal=6.0-beta2
Drupal Drupal=6.0-beta3
Drupal Drupal=6.0-beta4
Drupal Drupal=6.0-dev
Drupal Drupal=6.0-rc1
Drupal Drupal=6.0-rc2
Drupal Drupal=6.0-rc3
Drupal Drupal=6.0-rc4
Drupal Drupal=6.1
Drupal Drupal=6.2
Drupal Drupal=6.3
Drupal Drupal=6.4
Drupal Drupal=6.5
Drupal Drupal=6.6
Drupal Drupal=6.7
Drupal Drupal=6.8
Drupal Drupal=6.9
Drupal Drupal=6.10
Drupal Drupal=6.11
Drupal Drupal=6.12
Drupal Drupal=6.13
Drupal Drupal=6.14
Drupal Drupal=6.15
Drupal Drupal=6.16
Drupal Drupal=6.17
Drupal Drupal=6.18
Drupal Drupal=6.19
Drupal Drupal=6.20
Drupal Drupal=6.21
Drupal Drupal=6.22
Drupal Drupal=6.23
Drupal Drupal=6.24
Drupal Drupal=6.25
Drupal Drupal=6.26
Remediation
Patch Available
Patch Available
Event History
Jan 3, 2013
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5652?
CVE-2012-5652 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2012-5652?
To fix CVE-2012-5652, upgrade your Drupal installation to version 6.27 or later.
3
What versions of Drupal are affected by CVE-2012-5652?
CVE-2012-5652 affects all versions of Drupal 6.x prior to 6.27.
4
What kind of information can be obtained through CVE-2012-5652?
CVE-2012-5652 allows remote attackers to obtain sensitive information about uploaded files.
5
Is CVE-2012-5652 exploited remotely?
Yes, CVE-2012-5652 can be exploited remotely by attackers.