VULNERABILITY INTELLIGENCE

CVE-2015-5499

CVSS score4 MEDIUM
EPSS probability0.86%
CISA KEVNot currently listed
Published2015-08-18
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:N/I:P/A:N

Description

The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify custom widgets and create widget database records by leveraging the "navigate view" permission.

Primary references