CVE-2012-1056

Name of the Vulnerable Software and Affected Versions Drupal Forward module versions 6.x-1.x before 6.x-1.21 Drupal Forward module versions 7.x-1.x before 7.x-1.3

Description The issue concerns the improper enforcement of permissions for certain features, including Recent forwards, Most forwarded, and Dynamic blocks. This allows remote attackers to obtain node titles via unspecified vectors.

Recommendations For Drupal Forward module version 6.x-1.x, update to version 6.x-1.21 or later. For Drupal Forward module version 7.x-1.x, update to version 7.x-1.3 or later.