CVE-2012-5654
Severity CVSS v4.0:
Pending analysis
Type:
CWE-200
Information Leak / Disclosure
Publication date:
03/01/2013
Last modified:
11/04/2025
Description
The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags.
Impact
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:nodewords_project:nodewords:*:beta2:*:*:*:*:*:* | 6.x-1.14 (including) | |
| cpe:2.3:a:nodewords_project:nodewords:4.7-1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:4.7-1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:4.7-1.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:4.7-1.x:dev:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:5.x-1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:5.x-1.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:5.x-1.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:5.x-1.4:*:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:5.x-1.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:5.x-1.7:*:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:5.x-1.8:*:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:5.x-1.8:rc1:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:5.x-1.9:*:*:*:*:*:*:* | ||
| cpe:2.3:a:nodewords_project:nodewords:5.x-1.10:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page