Unrated severityNVD Advisory· Published Aug 18, 2015· Updated May 6, 2026
CVE-2015-5499
CVE-2015-5499
Description
The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify custom widgets and create widget database records by leveraging the "navigate view" permission.
Affected products
1- cpe:2.3:a:navigate_project:navigate:-:*:*:*:*:drupal:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.drupal.org/node/2492245nvdPatchVendor Advisory
- www.openwall.com/lists/oss-security/2015/07/04/4nvd
News mentions
0No linked articles in our index yet.