CVE-2013-1925: Low severity chaos tool suite (ctools) for drupal vulnerability
The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read restricted node titles via an autocomplete list.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1925?
CVE-2013-1925 is classified as a moderate severity vulnerability that allows unauthorized access to node titles.
How do I fix CVE-2013-1925?
To fix CVE-2013-1925, upgrade the Chaos Tool Suite (Ctools) module to version 7.x-1.3 or later.
Who is affected by CVE-2013-1925?
CVE-2013-1925 affects remote authenticated users with the 'access content' permission in specific versions of the Ctools module.
What versions of Ctools are vulnerable to CVE-2013-1925?
Versions 7.x-1.0 to 7.x-1.2 of the Chaos Tool Suite (Ctools) module are vulnerable to CVE-2013-1925.
What type of attack does CVE-2013-1925 enable?
CVE-2013-1925 enables remote authenticated users to read restricted node titles through an autocomplete list.