Read the docs
TI-2012-04755 Aliases CVE-2012-5654GHSA-5r67-337r-4wwj

The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to…

Priority LOW 22CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Information disclosure
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags.

Why it matters now

EPSS 0.01191 68th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 53

CPEVersionsRoleVendor
cpe:2.3:a:nodewords_project:nodewords:*:beta2:*:*:*:*:*:*up to 6.x-1.14VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:4.7-1.0:*:*:*:*:*:*:*4.7-1.0VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:4.7-1.1:*:*:*:*:*:*:*4.7-1.1VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:4.7-1.2:*:*:*:*:*:*:*4.7-1.2VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:4.7-1.x:dev:*:*:*:*:*:*4.7-1.x devVulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.0:*:*:*:*:*:*:*5.x-1.0VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.2:*:*:*:*:*:*:*5.x-1.2VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.3:*:*:*:*:*:*:*5.x-1.3VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.4:*:*:*:*:*:*:*5.x-1.4VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.5:*:*:*:*:*:*:*5.x-1.5VulnerableNodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:*:beta2:*:*:*:*:*:* Versions up to 6.x-1.14 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:4.7-1.0:*:*:*:*:*:*:* Versions 4.7-1.0 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:4.7-1.1:*:*:*:*:*:*:* Versions 4.7-1.1 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:4.7-1.2:*:*:*:*:*:*:* Versions 4.7-1.2 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:4.7-1.x:dev:*:*:*:*:*:* Versions 4.7-1.x dev Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.0:*:*:*:*:*:*:* Versions 5.x-1.0 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.2:*:*:*:*:*:*:* Versions 5.x-1.2 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.3:*:*:*:*:*:*:* Versions 5.x-1.3 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.4:*:*:*:*:*:*:* Versions 5.x-1.4 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.5:*:*:*:*:*:*:* Versions 5.x-1.5 Vulnerable ·Nodewords Project
Show 43 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:nodewords_project:nodewords:5.x-1.7:*:*:*:*:*:*:*5.x-1.7VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.8:*:*:*:*:*:*:*5.x-1.8VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.8:rc1:*:*:*:*:*:*5.x-1.8 rc1VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.9:*:*:*:*:*:*:*5.x-1.9VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.10:*:*:*:*:*:*:*5.x-1.10VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.11:*:*:*:*:*:*:*5.x-1.11VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.12:*:*:*:*:*:*:*5.x-1.12VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.13:*:*:*:*:*:*:*5.x-1.13VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:5.x-1.x:dev:*:*:*:*:*:*5.x-1.x devVulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.0:*:*:*:*:*:*:*6.x-1.0VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.0:rc1:*:*:*:*:*:*6.x-1.0 rc1VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.1:*:*:*:*:*:*:*6.x-1.1VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.2:*:*:*:*:*:*:*6.x-1.2VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:*:*:*:*:*:*:*6.x-1.3VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:alpha1:*:*:*:*:*:*6.x-1.3 alpha1VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:alpha2:*:*:*:*:*:*6.x-1.3 alpha2VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:beta3:*:*:*:*:*:*6.x-1.3 beta3VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:beta4:*:*:*:*:*:*6.x-1.3 beta4VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:beta5:*:*:*:*:*:*6.x-1.3 beta5VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.4:*:*:*:*:*:*:*6.x-1.4VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.5:*:*:*:*:*:*:*6.x-1.5VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.6:*:*:*:*:*:*:*6.x-1.6VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.7:*:*:*:*:*:*:*6.x-1.7VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.8:*:*:*:*:*:*:*6.x-1.8VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.9:*:*:*:*:*:*:*6.x-1.9VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.10:*:*:*:*:*:*:*6.x-1.10VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.11:*:*:*:*:*:*:*6.x-1.11VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta1:*:*:*:*:*:*6.x-1.12 beta1VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta2:*:*:*:*:*:*6.x-1.12 beta2VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta3:*:*:*:*:*:*6.x-1.12 beta3VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta4:*:*:*:*:*:*6.x-1.12 beta4VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta5:*:*:*:*:*:*6.x-1.12 beta5VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta6:*:*:*:*:*:*6.x-1.12 beta6VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta7:*:*:*:*:*:*6.x-1.12 beta7VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta8:*:*:*:*:*:*6.x-1.12 beta8VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta9:*:*:*:*:*:*6.x-1.12 beta9VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:rc1:*:*:*:*:*:*6.x-1.12 rc1VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.13:*:*:*:*:*:*:*6.x-1.13VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.13:rc1:*:*:*:*:*:*6.x-1.13 rc1VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.13:rc2:*:*:*:*:*:*6.x-1.13 rc2VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.14:beta1:*:*:*:*:*:*6.x-1.14 beta1VulnerableNodewords Project
cpe:2.3:a:nodewords_project:nodewords:6.x-1.x:dev:*:*:*:*:*:*6.x-1.x devVulnerableNodewords Project
cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*not specified by NVDRunning onDrupal
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.7:*:*:*:*:*:*:* Versions 5.x-1.7 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.8:*:*:*:*:*:*:* Versions 5.x-1.8 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.8:rc1:*:*:*:*:*:* Versions 5.x-1.8 rc1 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.9:*:*:*:*:*:*:* Versions 5.x-1.9 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.10:*:*:*:*:*:*:* Versions 5.x-1.10 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.11:*:*:*:*:*:*:* Versions 5.x-1.11 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.12:*:*:*:*:*:*:* Versions 5.x-1.12 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.13:*:*:*:*:*:*:* Versions 5.x-1.13 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:5.x-1.x:dev:*:*:*:*:*:* Versions 5.x-1.x dev Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.0:*:*:*:*:*:*:* Versions 6.x-1.0 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.0:rc1:*:*:*:*:*:* Versions 6.x-1.0 rc1 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.1:*:*:*:*:*:*:* Versions 6.x-1.1 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.2:*:*:*:*:*:*:* Versions 6.x-1.2 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:*:*:*:*:*:*:* Versions 6.x-1.3 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:alpha1:*:*:*:*:*:* Versions 6.x-1.3 alpha1 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:alpha2:*:*:*:*:*:* Versions 6.x-1.3 alpha2 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:beta3:*:*:*:*:*:* Versions 6.x-1.3 beta3 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:beta4:*:*:*:*:*:* Versions 6.x-1.3 beta4 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:beta5:*:*:*:*:*:* Versions 6.x-1.3 beta5 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.4:*:*:*:*:*:*:* Versions 6.x-1.4 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.5:*:*:*:*:*:*:* Versions 6.x-1.5 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.6:*:*:*:*:*:*:* Versions 6.x-1.6 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.7:*:*:*:*:*:*:* Versions 6.x-1.7 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.8:*:*:*:*:*:*:* Versions 6.x-1.8 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.9:*:*:*:*:*:*:* Versions 6.x-1.9 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.10:*:*:*:*:*:*:* Versions 6.x-1.10 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.11:*:*:*:*:*:*:* Versions 6.x-1.11 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta1:*:*:*:*:*:* Versions 6.x-1.12 beta1 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta2:*:*:*:*:*:* Versions 6.x-1.12 beta2 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta3:*:*:*:*:*:* Versions 6.x-1.12 beta3 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta4:*:*:*:*:*:* Versions 6.x-1.12 beta4 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta5:*:*:*:*:*:* Versions 6.x-1.12 beta5 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta6:*:*:*:*:*:* Versions 6.x-1.12 beta6 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta7:*:*:*:*:*:* Versions 6.x-1.12 beta7 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta8:*:*:*:*:*:* Versions 6.x-1.12 beta8 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta9:*:*:*:*:*:* Versions 6.x-1.12 beta9 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:rc1:*:*:*:*:*:* Versions 6.x-1.12 rc1 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.13:*:*:*:*:*:*:* Versions 6.x-1.13 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.13:rc1:*:*:*:*:*:* Versions 6.x-1.13 rc1 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.13:rc2:*:*:*:*:*:* Versions 6.x-1.13 rc2 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.14:beta1:*:*:*:*:*:* Versions 6.x-1.14 beta1 Vulnerable ·Nodewords Project
  • cpe:2.3:a:nodewords_project:nodewords:6.x-1.x:dev:*:*:*:*:*:* Versions 6.x-1.x dev Vulnerable ·Nodewords Project
  • cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Drupal

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-5654
  2. 2026-10-03 Alias added: GHSA-5r67-337r-4wwj

References

Patch 2

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences