Unrated severityNVD Advisory· Published Dec 17, 2015· Updated May 6, 2026
CVE-2015-8602
CVE-2015-8602
Description
The Token Insert Entity module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote authenticated users with certain permissions to bypass intended access restrictions and possibly obtain sensitive information by inserting a token, which embeds a rendered entity in the main node.
Affected products
1- cpe:2.3:a:token_insert_entity_project:token_insert_entity:7.x-1.0:*:*:*:*:drupal:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.drupal.org/node/2571905nvdPatch
- www.drupal.org/node/2627638nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.