VULNERABILITY INTELLIGENCE
CVE-2015-7227
CVSS score3.5 LOW
EPSS probability0.79%
CISA KEVNot currently listed
Published2015-09-17
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:N
Description
The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels.
Primary references
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch