← Back

CVE-2012-5654

nvd nist
Published: Jan 3, 2013Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:P/I:N/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags.

Affected (52)

Nodewords
Configuration A
52 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nodewords Project
Up to 6.x-1.14
Version 4.7-1.0
Version 4.7-1.1
Version 4.7-1.2
Version 4.7-1.x dev
Version 5.x-1.0
Version 5.x-1.10
Version 5.x-1.11
Version 5.x-1.12
Version 5.x-1.13
Version 5.x-1.2
Version 5.x-1.3
Version 5.x-1.4
Version 5.x-1.5
Version 5.x-1.7
Version 5.x-1.8
Version 5.x-1.8 rc1
Version 5.x-1.9
Version 5.x-1.x dev
Version 6.x-1.0
Version 6.x-1.0 rc1
Version 6.x-1.10
Version 6.x-1.11
Version 6.x-1.12 beta1
Version 6.x-1.12 beta2
Version 6.x-1.12 beta3
Version 6.x-1.12 beta4
Version 6.x-1.12 beta5
Version 6.x-1.12 beta6
Version 6.x-1.12 beta7
Version 6.x-1.12 beta8
Version 6.x-1.12 beta9
Version 6.x-1.12 rc1
Version 6.x-1.13
Version 6.x-1.13 rc1
Version 6.x-1.13 rc2
Version 6.x-1.14 beta1
Version 6.x-1.1
Version 6.x-1.2
Version 6.x-1.3
Version 6.x-1.3 alpha1
Version 6.x-1.3 alpha2
Version 6.x-1.3 beta3
Version 6.x-1.3 beta4
Version 6.x-1.3 beta5
Version 6.x-1.4
Version 6.x-1.5
Version 6.x-1.6
Version 6.x-1.7
Version 6.x-1.8
Version 6.x-1.9
Version 6.x-1.x dev
Running on/withPlatform Versions
Drupal
Drupal
All versions

References (6)

Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.