Chaos Tool Suite Project ctools for Drupal 7.x-1.6 RC 1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.6:rc1:*:*:*:drupal:*:*

part: a version: 7.x-1.6 update: rc1

VendorChaos Tool Suite Project (89e9e8e7-3b94-5a49-ad96-e21459b5932e)
ProductCtools (7fd4fd71-5346-5e56-b2b3-afda641137a4)
Edition*
Language*
Software edition*
Target softwaredrupal
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/drupalprojects/ctools purl2cpe 2026-06-01 10:17:01.605036
pkg:github/sdboyer/ctools purl2cpe 2026-06-01 10:17:01.605038

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7875 vulnerable 2026-06-08 05:07:02.248725 Details available
ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins that are used on Panels and similar systems to place content and functionality on a page.
Published: 2017-08-07T17:00:00.000Z
Updated: 2024-08-06T08:06:30.266Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4375 vulnerable 2026-06-08 05:06:39.735122 Details available
The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an autocomplete search on custom entities without an access query tag or (2) leveraging knowledge of the ID of an entity.
Published: 2015-06-15T14:00:00.000Z
Updated: 2024-08-06T06:11:12.908Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.