Read the docs

Notify Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Notify Project records in CISA KEV

No Notify Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 21

The Notify module 7.x-1.x before 7.x-1.1 for Drupal does not properly restrict access to (1) new or (2) modified nodes or (3) their fields, which allows remote authenticated users to obtain node titles, teasers, and fiel…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.00937 Published 2014-12-01 No fix listed CWE-200
Open these records in search →