PT-2012-5445
CVE-2012-4499
·
Published
2012-10-31
·
Updated
2012-11-01
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Email Field module versions 6.x-1.x before 6.x-1.2
Email Field module versions 7.x-1.x before 7.x-1.1
Description
The issue affects the contact formatter page in the Email Field module, allowing remote attackers to email the stored address in the entity. The attack vector is not specified.
Recommendations
For Email Field module versions 6.x-1.x before 6.x-1.2, update to version 6.x-1.2 or later.
For Email Field module versions 7.x-1.x before 7.x-1.1, update to version 7.x-1.1 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾