The contact formatter page in the Email Field module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to email the stored address in the entity via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| matthias_hutterer / email | 6.x-1.0 | 6.x-1.0.x |
| matthias_hutterer / email | 6.x-1.1 | 6.x-1.1.x |
| matthias_hutterer / email | 6.x-1.x-dev | 6.x-1.x-dev.x |
| matthias_hutterer / email | 7.x-1.0-beta1 | 7.x-1.0-beta1.x |
| matthias_hutterer / email | 7.x-1.0 | 7.x-1.0.x |
| matthias_hutterer / email | 7.x-1.0-alpha2 | 7.x-1.0-alpha2.x |
| matthias_hutterer / email | 7.x-1.0-alpha1 | 7.x-1.0-alpha1.x |
| matthias_hutterer / email | 7.x-1.x-dev | 7.x-1.x-dev.x |