Approved changes feed: RSS · Atom

cpe:2.3:a:user_read-only_project:user_readonly:7.x-1.1:*:*:*:*:*:*:*

part: a version: 7.x-1.1 update: *

VendorUser Read Only Project (fa8baa13-3ae8-562b-ad9a-c3c7a8e3614d)
ProductUser Readonly (f5b063e8-0757-54d3-b84b-dc5df79d5659)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5557 vulnerable 2026-06-08 05:02:57.266024 Details available
The User Read-Only module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, does not properly assign roles when there are more than three roles on the site and certain unspecified configurations, which might allow remote authenticated users to gain privileges by performing certain operations, as demonstrated by changing a password.
Published: 2012-12-03T21:00:00.000Z
Updated: 2024-09-16T16:28:57.220Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.