cve.bz

CVE-2012-4500

no score yetEPSS 1.0%

nancy wichmann announcements: no CVSS score yet. EPSS 1.0% chance of exploitation in the next 30 days.

The Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the "access announcements" permission to bypass node access restrictions and possibly have other unspecified impact.
EPSS
1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE
CWE-264
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON