CVE-2012-2922
Mandriva Linux Security Advisory 2013-074
Severity Score
5.3
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message.
La función request_path en includes/bootstrap.inc en Drupal v7.14 y anteriores, permite a atacantes remotos obtener información sensible a través del parámetro q[] sobre index.php, lo que revela el path de instalación en un mensaje de error.
Drupal core's text filtering system provides several features including removing inappropriate HTML tags and automatically linking content that appears to be a link. A pattern in Drupal's text matching was found to be inefficient with certain specially crafted strings. This vulnerability is mitigated by the fact that users must have the ability to post content sent to the filter system such as a role with the post comments or Forum topic: Create new content permission. Drupal core's Form API allows users to set a destination, but failed to validate that the URL was internal to the site. Various other issues were also addressed.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-05-21 CVE Reserved
- 2012-05-21 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2012-05/0052.html | Mailing List | |
| http://archives.neohapsis.com/archives/bugtraq/2012-05/0055.html | Mailing List | |
| http://osvdb.org/81817 | Vdb Entry | |
| http://www.openwall.com/lists/oss-security/2012/08/02/8 | Mailing List |
|
| http://www.securityfocus.com/bid/53454 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/75531 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2012-05/0053.html | 2024-08-06 | |
| http://secunia.com/advisories/49131 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 | 2017-08-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | <= 7.14 Search vendor "Drupal" for product "Drupal" and version " <= 7.14" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.0 Search vendor "Drupal" for product "Drupal" and version "5.0" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.0 Search vendor "Drupal" for product "Drupal" and version "5.0" | beta1 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.0 Search vendor "Drupal" for product "Drupal" and version "5.0" | beta2 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.0 Search vendor "Drupal" for product "Drupal" and version "5.0" | dev |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.0 Search vendor "Drupal" for product "Drupal" and version "5.0" | rc1 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.0 Search vendor "Drupal" for product "Drupal" and version "5.0" | rc2 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.1 Search vendor "Drupal" for product "Drupal" and version "5.1" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.2 Search vendor "Drupal" for product "Drupal" and version "5.2" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.3 Search vendor "Drupal" for product "Drupal" and version "5.3" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.4 Search vendor "Drupal" for product "Drupal" and version "5.4" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.5 Search vendor "Drupal" for product "Drupal" and version "5.5" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.6 Search vendor "Drupal" for product "Drupal" and version "5.6" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.7 Search vendor "Drupal" for product "Drupal" and version "5.7" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.8 Search vendor "Drupal" for product "Drupal" and version "5.8" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.9 Search vendor "Drupal" for product "Drupal" and version "5.9" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.10 Search vendor "Drupal" for product "Drupal" and version "5.10" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.11 Search vendor "Drupal" for product "Drupal" and version "5.11" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.12 Search vendor "Drupal" for product "Drupal" and version "5.12" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.13 Search vendor "Drupal" for product "Drupal" and version "5.13" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.14 Search vendor "Drupal" for product "Drupal" and version "5.14" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.15 Search vendor "Drupal" for product "Drupal" and version "5.15" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.16 Search vendor "Drupal" for product "Drupal" and version "5.16" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.17 Search vendor "Drupal" for product "Drupal" and version "5.17" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.18 Search vendor "Drupal" for product "Drupal" and version "5.18" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.19 Search vendor "Drupal" for product "Drupal" and version "5.19" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.20 Search vendor "Drupal" for product "Drupal" and version "5.20" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.21 Search vendor "Drupal" for product "Drupal" and version "5.21" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.22 Search vendor "Drupal" for product "Drupal" and version "5.22" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.23 Search vendor "Drupal" for product "Drupal" and version "5.23" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | beta1 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | beta2 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | beta3 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | beta4 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | dev |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | rc1 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | rc2 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | rc3 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | rc4 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.1 Search vendor "Drupal" for product "Drupal" and version "6.1" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.2 Search vendor "Drupal" for product "Drupal" and version "6.2" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.3 Search vendor "Drupal" for product "Drupal" and version "6.3" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.4 Search vendor "Drupal" for product "Drupal" and version "6.4" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.5 Search vendor "Drupal" for product "Drupal" and version "6.5" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.6 Search vendor "Drupal" for product "Drupal" and version "6.6" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.7 Search vendor "Drupal" for product "Drupal" and version "6.7" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.8 Search vendor "Drupal" for product "Drupal" and version "6.8" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.9 Search vendor "Drupal" for product "Drupal" and version "6.9" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.10 Search vendor "Drupal" for product "Drupal" and version "6.10" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.11 Search vendor "Drupal" for product "Drupal" and version "6.11" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.12 Search vendor "Drupal" for product "Drupal" and version "6.12" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.13 Search vendor "Drupal" for product "Drupal" and version "6.13" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.14 Search vendor "Drupal" for product "Drupal" and version "6.14" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.15 Search vendor "Drupal" for product "Drupal" and version "6.15" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.16 Search vendor "Drupal" for product "Drupal" and version "6.16" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.17 Search vendor "Drupal" for product "Drupal" and version "6.17" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.18 Search vendor "Drupal" for product "Drupal" and version "6.18" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.0 Search vendor "Drupal" for product "Drupal" and version "7.0" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.0 Search vendor "Drupal" for product "Drupal" and version "7.0" | alpha1 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.0 Search vendor "Drupal" for product "Drupal" and version "7.0" | alpha2 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.0 Search vendor "Drupal" for product "Drupal" and version "7.0" | alpha3 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.0 Search vendor "Drupal" for product "Drupal" and version "7.0" | alpha4 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.0 Search vendor "Drupal" for product "Drupal" and version "7.0" | alpha5 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.0 Search vendor "Drupal" for product "Drupal" and version "7.0" | alpha6 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.0 Search vendor "Drupal" for product "Drupal" and version "7.0" | alpha7 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.0 Search vendor "Drupal" for product "Drupal" and version "7.0" | dev |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.1 Search vendor "Drupal" for product "Drupal" and version "7.1" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.2 Search vendor "Drupal" for product "Drupal" and version "7.2" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.3 Search vendor "Drupal" for product "Drupal" and version "7.3" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.4 Search vendor "Drupal" for product "Drupal" and version "7.4" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.5 Search vendor "Drupal" for product "Drupal" and version "7.5" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.6 Search vendor "Drupal" for product "Drupal" and version "7.6" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.7 Search vendor "Drupal" for product "Drupal" and version "7.7" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.8 Search vendor "Drupal" for product "Drupal" and version "7.8" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.9 Search vendor "Drupal" for product "Drupal" and version "7.9" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.10 Search vendor "Drupal" for product "Drupal" and version "7.10" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.11 Search vendor "Drupal" for product "Drupal" and version "7.11" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 7.12 Search vendor "Drupal" for product "Drupal" and version "7.12" | - |
Affected
| ||||||