CVE-2012-5588
The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or teaser display mode, does not properly check permissions, which allows remote attackers to email the stored address via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| epiqo / email | 6.x-1.0-rc1 | 6.x-1.0-rc1.x |
| epiqo / email | 6.x-1.0 | 6.x-1.0.x |
| epiqo / email | 6.x-1.1 | 6.x-1.1.x |
| epiqo / email | 6.x-1.2 | 6.x-1.2.x |
| epiqo / email | 6.x-1.x-dev | 6.x-1.x-dev.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime