The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.
2016-11-25T18:59:00.387
2025-04-12T10:46:40.837
Deferred
CVSSv3.0: 4.3 (MEDIUM)
AV:N/AC:L/Au:S/C:P/I:N/A:N
8.0
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.0 | Yes |
| Application | drupal | drupal | 8.0.1 | Yes |
| Application | drupal | drupal | 8.0.2 | Yes |
| Application | drupal | drupal | 8.0.3 | Yes |
| Application | drupal | drupal | 8.0.4 | Yes |
| Application | drupal | drupal | 8.0.5 | Yes |
| Application | drupal | drupal | 8.0.6 | Yes |
| Application | drupal | drupal | 8.1.0 | Yes |
| Application | drupal | drupal | 8.1.0 | Yes |
| Application | drupal | drupal | 8.1.0 | Yes |
| Application | drupal | drupal | 8.1.0 | Yes |
| Application | drupal | drupal | 8.1.1 | Yes |
| Application | drupal | drupal | 8.1.2 | Yes |
| Application | drupal | drupal | 8.1.3 | Yes |
| Application | drupal | drupal | 8.1.4 | Yes |
| Application | drupal | drupal | 8.1.5 | Yes |
| Application | drupal | drupal | 8.1.6 | Yes |
| Application | drupal | drupal | 8.1.7 | Yes |
| Application | drupal | drupal | 8.1.8 | Yes |
| Application | drupal | drupal | 8.1.9 | Yes |
| Application | drupal | drupal | 8.1.10 | Yes |
| Application | drupal | drupal | 8.2.0 | Yes |
| Application | drupal | drupal | 8.2.0 | Yes |
| Application | drupal | drupal | 8.2.0 | Yes |
| Application | drupal | drupal | 8.2.0 | Yes |
| Application | drupal | drupal | 8.2.0 | Yes |
| Application | drupal | drupal | 8.2.0 | Yes |
| Application | drupal | drupal | 8.2.1 | Yes |
| Application | drupal | drupal | 8.2.2 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.1 | Yes |
| Application | drupal | drupal | 7.2 | Yes |
| Application | drupal | drupal | 7.3 | Yes |
| Application | drupal | drupal | 7.4 | Yes |
| Application | drupal | drupal | 7.10 | Yes |
| Application | drupal | drupal | 7.11 | Yes |
| Application | drupal | drupal | 7.12 | Yes |
| Application | drupal | drupal | 7.13 | Yes |
| Application | drupal | drupal | 7.14 | Yes |
| Application | drupal | drupal | 7.15 | Yes |
| Application | drupal | drupal | 7.16 | Yes |
| Application | drupal | drupal | 7.17 | Yes |
| Application | drupal | drupal | 7.18 | Yes |
| Application | drupal | drupal | 7.19 | Yes |
| Application | drupal | drupal | 7.20 | Yes |
| Application | drupal | drupal | 7.21 | Yes |
| Application | drupal | drupal | 7.22 | Yes |
| Application | drupal | drupal | 7.23 | Yes |
| Application | drupal | drupal | 7.24 | Yes |
| Application | drupal | drupal | 7.25 | Yes |
| Application | drupal | drupal | 7.26 | Yes |
| Application | drupal | drupal | 7.27 | Yes |
| Application | drupal | drupal | 7.28 | Yes |
| Application | drupal | drupal | 7.29 | Yes |
| Application | drupal | drupal | 7.30 | Yes |
| Application | drupal | drupal | 7.31 | Yes |
| Application | drupal | drupal | 7.32 | Yes |
| Application | drupal | drupal | 7.33 | Yes |
| Application | drupal | drupal | 7.34 | Yes |
| Application | drupal | drupal | 7.35 | Yes |
| Application | drupal | drupal | 7.36 | Yes |
| Application | drupal | drupal | 7.37 | Yes |
| Application | drupal | drupal | 7.38 | Yes |
| Application | drupal | drupal | 7.40 | Yes |
| Application | drupal | drupal | 7.41 | Yes |
| Application | drupal | drupal | 7.42 | Yes |
| Application | drupal | drupal | 7.43 | Yes |
| Application | drupal | drupal | 7.44 | Yes |
| Application | drupal | drupal | 7.50 | Yes |
| Application | drupal | drupal | 7.51 | Yes |