Marc Ingram
1 CVEs
vendor
Monthly
The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "access user profiles" permission to access arbitrary users' emails via. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable.
Privilege Escalation
Services
Marc Ingram
NVD
CVSS 2.0
2.1
EPSS
0.3%
EPSS 0%
CVSS 2.1
LOW
PATCH
Monitor
The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "access user profiles" permission to access arbitrary users' emails via. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable.
Privilege Escalation
Services
Marc Ingram
NVD