Unscored severity · published Aug 6, 2014
CVE-2014-5179
The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) nodes or (2) users, which allows remote…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) nodes or (2) users, which allows remote attackers to obtain sensitive information via a crafted link.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freelinking · Freelinking Project
All versions, or not specified · source: NVD
FF
Freelinking For Case Tracker · Freelinking For Case Tracker Project
All versions, or not specified · source: NVD
Affected product
FF
Freelinking For Case Tracker
Freelinking For Case Tracker Project
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-5179
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-5179
www.securityfocus.com
http://www.securityfocus.com/bid/68861
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/94870
Vendor Advisory
https://www.drupal.org/node/2308503