Unrated severityNVD Advisory· Published Dec 17, 2015· Updated Jun 17, 2026
CVE-2015-8602
CVE-2015-8602
Description
The Token Insert Entity module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote authenticated users with certain permissions to bypass intended access restrictions and possibly obtain sensitive information by inserting a token, which embeds a rendered entity in the main node.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <7.x-1.1
- cpe:2.3:a:token_insert_entity_project:token_insert_entity:7.x-1.0:*:*:*:*:drupal:*:*
Patches
Vulnerability mechanics
References
2- www.drupal.org/node/2571905nvdPatch
- www.drupal.org/node/2627638nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.