CVE-2015-5512

Published: Aug 18, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to access Views using the "me" user argument handler by substituting "me" for a user id in a URL.

Affected (12)

Products: Me Aliases Project: Me Aliases

Me Aliases Project

1 product

Me Aliases

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Me Aliases Project Me Aliases	Version 6.x-2.0
Me Aliases Project Me Aliases	Version 6.x-2.1
Me Aliases Project Me Aliases	Version 6.x-2.2
Me Aliases Project Me Aliases	Version 6.x-2.3
Me Aliases Project Me Aliases	Version 6.x-2.4
Me Aliases Project Me Aliases	Version 6.x-2.5
Me Aliases Project Me Aliases	Version 6.x-2.6
Me Aliases Project Me Aliases	Version 6.x-2.7
Me Aliases Project Me Aliases	Version 6.x-2.8
Me Aliases Project Me Aliases	Version 6.x-2.9
Me Aliases Project Me Aliases	Version 7.x-1.0
Me Aliases Project Me Aliases	Version 7.x-1.1