CVE-2013-1925

Published: Jul 16, 2013Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read restricted node titles via an autocomplete list.

Affected (11)

Products: Chaos Tool Suite Project: Ctools

Chaos Tool Suite Project

1 product

Ctools

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Chaos Tool Suite Project Ctools	Version 7.x-1.0
Chaos Tool Suite Project Ctools	Version 7.x-1.0 alpha1
Chaos Tool Suite Project Ctools	Version 7.x-1.0 alpha2
Chaos Tool Suite Project Ctools	Version 7.x-1.0 alpha3
Chaos Tool Suite Project Ctools	Version 7.x-1.0 alpha4
Chaos Tool Suite Project Ctools	Version 7.x-1.0 beta1
Chaos Tool Suite Project Ctools	Version 7.x-1.0 rc1
Chaos Tool Suite Project Ctools	Version 7.x-1.0 rc2
Chaos Tool Suite Project Ctools	Version 7.x-1.1
Chaos Tool Suite Project Ctools	Version 7.x-1.2
Chaos Tool Suite Project Ctools	Version 7.x-1.x dev