Drupal · Chaos Tool Suite · CVE-2013-1925
**Name of the Vulnerable Software and Affected Versions**
The Chaos Tool Suite (ctools) module versions 7.x-1.x through 7.x-1.2
**Description**
The issue allows remote authenticated users with the `access content` permission to read restricted node titles via an autocomplete list, due to improper restriction of node access.
**Recommendations**
For versions 7.x-1.x through 7.x-1.2, update to version 7.x-1.3 or later to resolve the issue.