CVE-2015-5490

State: Published
Severity: Not scored
Published: Aug 18, 2015
Updated: Aug 6, 2024
Reserved: Jul 10, 2015

Description

The _views_fetch_data method in includes/cache.inc in the Views module 7.x-3.5 through 7.x-3.10 for Drupal does not rebuild the full cache if the static cache is not empty, which allows remote attackers to bypass intended filters and obtain access to hidden content via unspecified vectors.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://www.drupal.org/node/2480327
https://www.drupal.org/node/2480259
https://www.drupal.org/node/2475669
74462vdb-entry
[oss-security] 20150704 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-100 to SA-CONTRIB-2015-131)mailing-list
http://cgit.drupalcode.org/views/commit/?id=cef693b

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.