Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An authenticated attacker can bypass access restrictions of Drupal
Workbench Email.

Impacted products: Drupal Modules not comprehensive.

Severity: 2/4.

Creation date: 20/08/2015.

DESCRIPTION OF THE VULNERABILITY

The Workbench Email module can be installed on Drupal.

However, node validation is not performed when a user saves a
node. Technical details are unknown.

An authenticated attacker can therefore bypass access restrictions
of Drupal Workbench Email.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Drupal-Workbench-Email-bypassing-validation-17719