Bundle Copy
1 CVEs
product
Monthly
The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the "use PHP for settings" permission while importing settings, which allows remote authenticated users with certain. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable.
PHP
Privilege Escalation
Bundle Copy
NVD
CVSS 2.0
6.0
EPSS
0.9%
EPSS 1%
CVSS 6.0
MEDIUM
PATCH
This Month
The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the "use PHP for settings" permission while importing settings, which allows remote authenticated users with certain. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable.
PHP
Privilege Escalation
Bundle Copy
NVD