Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated users to obtain private content viewed by user 1 by reading the cache.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal Render缓存系统信息泄露漏洞
Vulnerability Description
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。 Drupal 7.38之前7.x版本的Render缓存系统中存在安全漏洞。当用户角色使用该程序缓存内容时,远程攻击者可通过读取缓存利用该漏洞获取‘user 1’用户查看的私有内容。
CVSS Information
N/A
Vulnerability Type
N/A