Description

The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.

Remediation

References

CVE-2016-9449

Related Vulnerabilities

Perl Integer Overflow or Wraparound Vulnerability (CVE-2020-10878)

Atlassian Jira CVE-2012-2926 Vulnerability (CVE-2012-2926)

Apache HTTP Server Insertion of Sensitive Information into Log File Vulnerability (CVE-2001-1556)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3828)

LimeSurvey Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-48008)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2016-9449