Entity Reference Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Entity Reference Project records in CISA KEV

No Entity Reference Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Entityreference 1 record LOW

Records

1 record in Entityreference · all components

TI-2013-05804 CVE-2013-7066 · GHSA-6jf6-56p6-5jpm

The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers…

LOW 22

The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit permissions to a node that references a private node.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01066 Published 2014-04-29 No fix listed CWE-264

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0