Vulnerability advisory

GHSA-rfxx-gxwc-923c

Drupal Views can allow unauthorized users to see Statistics information

Published May 17, 2022Updated Apr 23, 2024OSV record ↗

Also known as CVE-2016-6212

Severity

CVSS 3.xCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected versions

drupal/core Packagist

All drupal/core advisories →

Affected	Fixed in
`8.0` to before 8.1.3	`8.1.3`Advisories →
Also listed as affected (28) `8.0.0` `8.0.0-beta10` `8.0.0-beta11` `8.0.0-beta12` `8.0.0-beta13` `8.0.0-beta14` `8.0.0-beta15` `8.0.0-beta16` `8.0.0-beta6` `8.0.0-beta7` `8.0.0-beta8` `8.0.0-beta9` `8.0.0-rc1` `8.0.0-rc2` `8.0.0-rc3` `8.0.0-rc4` `8.0.1` `8.0.2` `8.0.3` `8.0.4` `8.0.5` `8.0.6` `8.1.0` `8.1.0-beta1` `8.1.0-beta2` `8.1.0-rc1` `8.1.1` `8.1.2`

drupal/drupal Packagist

All drupal/drupal advisories →

Affected Fixed in

8.0 to before 8.1.3 8.1.3Advisories →

Also listed as affected (34)

Description

The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors.

GHSA-rfxx-gxwc-923c

Affected versions

drupal/core Packagist

drupal/drupal Packagist

Description

References