CVE-2015-3391

Published: Apr 21, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Path Breadcrumbs module before 7.x-3.2 for Drupal allows remote attackers to bypass intended access restrictions and obtain sensitive node titles by reading a 403 Not Found page.

Affected (1)

Products: Path Breadcrumbs Project: Path Breadcrumbs

Path Breadcrumbs Project

1 product

Path Breadcrumbs

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Path Breadcrumbs Project Path Breadcrumbs	Up to 7.x-3.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://www.openwall.com/lists/oss-security/2015/02/05/16

Source: cve@mitre.org

http://www.securityfocus.com/bid/72569

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/100672

Source: cve@mitre.org

https://www.drupal.org/node/2420121

Source: cve@mitre.org

Patch

https://www.drupal.org/node/2420139

Source: cve@mitre.org

PatchVendor Advisory

http://www.openwall.com/lists/oss-security/2015/02/05/16