Unrated severityNVD Advisory· Published Aug 18, 2015· Updated Jun 17, 2026
CVE-2015-5499
CVE-2015-5499
Description
The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify custom widgets and create widget database records by leveraging the "navigate view" permission.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:navigate_project:navigate:-:*:*:*:*:drupal:*:*
Patches
Vulnerability mechanics
References
2- www.drupal.org/node/2492245nvdPatchVendor Advisory
- www.openwall.com/lists/oss-security/2015/07/04/4nvd
News mentions
0No linked articles in our index yet.