CVE-2012-5584

Published: Dec 26, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows remote attackers to read a node's headers by accessing a table of contents block.

Affected (9)

Products: M2osw: Tableofcontents

M2osw

1 product

Tableofcontents

Configuration A

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
M2osw Tableofcontents	Version 6.x-3.0
M2osw Tableofcontents	Version 6.x-3.1
M2osw Tableofcontents	Version 6.x-3.2
M2osw Tableofcontents	Version 6.x-3.3
M2osw Tableofcontents	Version 6.x-3.4
M2osw Tableofcontents	Version 6.x-3.5
M2osw Tableofcontents	Version 6.x-3.6
M2osw Tableofcontents	Version 6.x-3.7
M2osw Tableofcontents	Version 6.x-3.x dev