CVE-2016-9449

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2016-9449
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9449.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-9449
Aliases
Related
Published
2016-11-25T18:59:00Z
Modified
2024-09-03T01:35:27.910238Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.

References

Affected packages

Git / github.com/drupal/drupal

Affected ranges

Type
GIT
Repo
https://github.com/drupal/drupal
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
079a52b45df32b8aa82d1eb0c57bd97d1e065f57
Last affected
09dbe27efa2b6f255b804168711166bd3f8b6d4e
Last affected
0c6f9b0074a227fe1b2fef3621925ef900039486
Last affected
0e38d9407d03143276147b9d3f1a2dae8826c99c
Last affected
121cf4e23ae2f475f785939ab504ed2a1d52dfd0
Last affected
131a6f5129b18f3913ba5882111797f8588c5aaf
Last affected
13692d3b92b2d4ddd93b0ddf0a4c4d97b37e68a8
Last affected
154ffa85f8bf5033c958ba8face74797463a6bde
Last affected
15ddad3bf498b0e8bdfe7724e1dbaf653c2d7885
Last affected
1769d1cca92e206510528c324552797e83a1fc7c
Last affected
18c5da5028b7c3ba985e598bb8df45613285d437
Last affected
19b32a3ab40e8c89495ee260e46a5e8375ad3756
Last affected
1d4604da252f0e6e19339957ec214388f61b908d
Last affected
1db8df63020cb020ed13a9793669f6e435f64334
Last affected
237c0642a799ed3a1895f3144d8017422e2a8f72
Last affected
260d019e286d36f7d2b4fb5b3d62723a9ee81840
Last affected
2b08ba7c1c7afb76c1e3d54e533ab631c5a0ba67
Last affected
2d64433829033660b87a1a1d054b3899a18addba
Last affected
30115b418e854f4df5b94a1667d3ade55cfb9471
Last affected
305b2f38da238705a10e543994808ce29dbdbbc0
Last affected
30d1e719aa5e9a9ad66514078ca3b0975ddadc9c
Last affected
316bd96ebff36284f5f3e33268760ff9c672b6f8
Last affected
32801642fc1bc9f4a9942ce90e9b3669e74d16b3
Last affected
35c2f3ca5c935f3d8bde15932a712677c9bbd50f
Last affected
3a24da1b40f5e05876ad7775044500b61eb2ed94
Last affected
3f7404935955cd2a63023e77a07c4231ad5ff62a
Last affected
40093b2fa7dde4a5f3c6806aad91b9302c232903
Last affected
407b39f9602321dd0e979006c929339ec34f0d6c
Last affected
40bc6813016bc7de89986998a75fa13d76ce3152
Last affected
48786c6ee658f4ef4275962331d406ab186dd6f0
Last affected
497914920385b7016ac9c9367e0198530787adf2
Last affected
49e2d2ca6f6c6489b07b9e863150d20a38148a57
Last affected
4ba5f184c69306da0e30260890f01ea0694af274
Last affected
4d154b4c818f1a82e5d33611a3af8d6f7383980a
Last affected
4d4080b17681ae674e10c077b72d00f0b1544e0c
Last affected
4f05b98429b58c93fec1a8222956851f03a6c4ac
Last affected
5249c53ef0c3a715bc46bb568c91470ed0374996
Last affected
5899fe1f5b0f9c1f9feaa893f5ead14955d6231c
Last affected
598ccc572506256a13c6b3eb978b348f0dee3c6b
Last affected
5a19562de5b1a8a056bc33c467d806073c4ac085
Last affected
5bf651dabf88766a588adf3c34a7ee2fa1ab4016
Last affected
5cb79b4b217e9aa315d61284398cce132c28bea4
Last affected
5e60a2770329300866319aac1ab465159688d319
Last affected
6204be67bb3c1a0b64991770c27b62dbadb15007
Last affected
647bfab79e6ee1fddb339c50152315e479d4fe8f
Last affected
64de978a08663904ba8231f20d2f26c8f5a135e8
Last affected
6642fbc7001c728e218170fd286e6b8a24eef24f
Last affected
6ffaabfece5d21e41c1ae53c8e3a8f6ffa94582a
Last affected
70378b5c5dd7c99f56f7e3f36cffcd33d46644c6
Last affected
766daeb0449588db7207606c22bcf7b59d1f6f9b
Last affected
782d1155c62c0a879bf587c7e40c3a13bcf6879c
Last affected
7b2dc7936e2566c711159f75634cbb60ddacb340
Last affected
81586d9e9d04dcee487c50de426c04221899b6d0
Last affected
83b80acad8431fcd56e9a331ba06c41edee48c91
Last affected
8bd13242c06ad307c72500b17c38cf325de424a0
Last affected
90e884ad0f7f2cf269d953f7d70966de9fd821ff
Last affected
9879d29f731570a34b24c4eae4cc8cb30c7a5082
Last affected
9b0cfa7415e91b80fb5a87760477b6f5783eb048
Last affected
9b7ead2e45935bc1dadfe74490b8cbefa54f433a
Last affected
9b9d9296c85e88d6ecb875d7e350e0083a105108
Last affected
9bf09eea76bbf071db4016252faca2d20bf1a6c2
Last affected
9d16792580c241b42e6192b480f65cf0bdd07bc9
Last affected
9ee4a1a2fa3bedb3852d21f2198509c107c48890
Last affected
9f72251c9291b5613acb9ca4ea7a51b4739e3f93
Last affected
a07564a2968a464d3f800da0c2e75045caa367ea
Last affected
a4fabec730e7377f6dfe656599145b40f778a77d
Last affected
a584af62514ba7ec37b82b0c7b17081fcca4c5e0
Last affected
a87557fde744444c0f7f5344d4f82b721a65717e
Last affected
b101f904648a70822b87427007b6228c3824e0ae
Last affected
b42286571f4a22324f321af025768107caa99c30
Last affected
b44056d2f8e8c71d35c85ec5c2fb8f7c8a02d8a8
Last affected
b47f95d3013619e33cafdf8b769b2b6179a07956
Last affected
b7390caeeec23886c4b8d91f8952c35c034cd41f
Last affected
b9127101ffeca819e74a03fa9f5a48d026c562e5
Last affected
bf704d6ffe55d66a440a55a9d43e8846d46d2440
Last affected
c0d600fe2ce507f28e91acc51d7f63be28521536
Last affected
c24c1c7694c3970213e758a7198bc4e4a9c485f8
Last affected
c3f5245f1c98a8a1cf119c977db05488e0a32074
Last affected
c511a4abe771499fe4ff682decad59a3cd1e61d0
Last affected
c5d6e6334fb7a71ecf1dbc7e06a7de8ad9547b27
Last affected
ce174ee8bf12440b904c0cbdb9c5a01bdc1784c4
Last affected
ce4cc6593bb01ab2b7817ae54beed9632f6e850e
Last affected
d08387cf6316da3b5158ccc1063acc5399ef3ee2
Last affected
d0b330ef316d761fc02eadeb659f9ff1ab106c3e
Last affected
d516f6778e57da524e3491710c6e5a5382dc647e
Last affected
d53f5234293d7d1a3bc8083ad13d7c850c834583
Last affected
d8cfe088697631a9789895b4128b12ab79c07207
Last affected
d918ae1ecc4e0fb86ae9296da1a39f02bd36cde4
Last affected
dc791ec5839b52c7616bf66993122aa9a1336384
Last affected
dce3c77a61d9510dbac6927b60a03bc8da19e947
Last affected
e15ebedc4c6afdab87c1ffd7cb1f5ca462aafe87
Last affected
ebf9026bb8411de4866824f45ab825ecb41a5f47
Last affected
ec59e1197a2aa37557f9a87f13ba4d90e6aabf4c
Last affected
effed1c831c997be26e12f18be0d8eb683f21a75
Last affected
f1def1199d3e73144d8931b30ebef7d2d82526cb
Last affected
f25feddd5ca56e6155e26e52667ab4fef87bb19d
Last affected
f7e125ce37fbf52b9581c2f9fade7ff33267bb42
Last affected
f9784cf829fe2d6aad57b6de1f2e3a167e95cea6
Last affected
fb83de52e58e8fb3303de7aa9834f99ae128564a
Last affected
fc345ab700c4d00eb5d1f5000700bc534feb49c6

Affected versions

1.*

1.0

2.*

2.0

3.*

3.0.1

5.*

5.0-beta-1
5.0-beta-2
5.0-rc-1
5.0-rc-2

6.*

6.0-beta-1
6.0-beta-2
6.0-beta-3
6.0-beta-4
6.0-rc-1
6.0-rc-2
6.0-rc-3

7.*

7.0
7.0-alpha1
7.0-alpha2
7.0-alpha3
7.0-alpha4
7.0-alpha5
7.0-alpha6
7.0-alpha7
7.0-beta1
7.0-beta2
7.0-beta3
7.0-rc-1
7.0-rc-2
7.0-rc-3
7.0-rc-4
7.0-unstable-1
7.0-unstable-10
7.0-unstable-2
7.0-unstable-3
7.0-unstable-4
7.0-unstable-5
7.0-unstable-6
7.0-unstable-7

8.*

8.0-alpha10
8.0-alpha11
8.0-alpha12
8.0-alpha13
8.0-alpha2
8.0-alpha3
8.0-alpha4
8.0-alpha5
8.0-alpha6
8.0-alpha7
8.0-alpha8
8.0-alpha9
8.0.0-alpha14
8.0.0-alpha15
8.0.0-beta1
8.0.0-beta2
8.0.0-beta3
8.0.0-beta4
8.0.0-beta5
8.0.0-beta6
8.0.0-beta7
8.0.0-beta9

Other

start