{"api_version":"1","generated_at":"2026-07-23T04:59:01+00:00","cve":"CVE-2012-5654","urls":{"html":"https://cve.report/CVE-2012-5654","api":"https://cve.report/api/cve/CVE-2012-5654.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-5654","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-5654"},"summary":{"title":"CVE-2012-5654","description":"The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags.","state":"PUBLISHED","assigner":"redhat","published_at":"2013-01-03 01:55:03","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-200","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://drupal.org/node/1859208","name":"http://drupal.org/node/1859208","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"nodewords 6.x-1.14 | drupal.org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2012/12/20/1","name":"http://www.openwall.com/lists/oss-security/2012/12/20/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE request for Drupal core, and contributed modules","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://drupal.org/node/1859282","name":"http://drupal.org/node/1859282","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"SA-CONTRIB-2012-173 - Nodewords: Information disclosure | drupal.org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5654","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5654","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"5654","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"drupal","cpe5":"drupal","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"4.7-1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"4.7-1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"4.7-1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"4.7-1.x","cpe7":"dev","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.8","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"5.x-1.x","cpe7":"dev","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.12","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.12","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.12","cpe7":"beta3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.12","cpe7":"beta4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.12","cpe7":"beta5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.12","cpe7":"beta6","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.12","cpe7":"beta7","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.12","cpe7":"beta8","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.12","cpe7":"beta9","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.12","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.13","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.13","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.14","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.3","cpe7":"alpha1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.3","cpe7":"alpha2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.3","cpe7":"beta3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.3","cpe7":"beta4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.3","cpe7":"beta5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"6.x-1.x","cpe7":"dev","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5654","vulnerable":"1","versionEndIncluding":"6.x-1.14","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nodewords_project","cpe5":"nodewords","cpe6":"*","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T21:14:16.400Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://drupal.org/node/1859208"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://drupal.org/node/1859282"},{"name":"[oss-security] 20121219 Re: CVE request for Drupal core, and contributed modules","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2012/12/20/1"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-01-03T01:00:00.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://drupal.org/node/1859208"},{"tags":["x_refsource_MISC"],"url":"http://drupal.org/node/1859282"},{"name":"[oss-security] 20121219 Re: CVE request for Drupal core, and contributed modules","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2012/12/20/1"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert@redhat.com","ID":"CVE-2012-5654","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://drupal.org/node/1859208","refsource":"CONFIRM","url":"http://drupal.org/node/1859208"},{"name":"http://drupal.org/node/1859282","refsource":"MISC","url":"http://drupal.org/node/1859282"},{"name":"[oss-security] 20121219 Re: CVE request for Drupal core, and contributed modules","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2012/12/20/1"}]}}}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2012-5654","datePublished":"2013-01-03T01:00:00.000Z","dateReserved":"2012-10-24T00:00:00.000Z","dateUpdated":"2024-09-16T23:30:50.652Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-01-03 01:55:03","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-200","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:*:beta2:*:*:*:*:*:*","versionEndIncluding":"6.x-1.14","matchCriteriaId":"9C6F3DF2-8915-44B4-9826-C645BE7198C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:4.7-1.0:*:*:*:*:*:*:*","matchCriteriaId":"C0FA9DB5-B822-4C51-A9F7-ED579281FE18"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:4.7-1.1:*:*:*:*:*:*:*","matchCriteriaId":"8970576E-AF70-4E96-ACCC-7B89409943F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:4.7-1.2:*:*:*:*:*:*:*","matchCriteriaId":"85A2DD85-58B8-412A-94FD-F33553252669"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:4.7-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"0ED3A756-B12B-40C4-B409-1B9297B00378"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"C98E29E2-2308-41ED-B214-09575C25E0A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"0A5727AB-C735-4E22-B9E1-220C731EDE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"5C4A74A6-D8CB-44D2-8745-39629E38B15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"85F7883D-52BD-4182-AD6B-DC85B8774899"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"A28145D9-3AAE-4448-9894-C7BD49819D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"011492F2-3857-4727-9C53-1C3E48E5C4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"1CC03788-B74C-4474-8333-3004B3B4A700"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"E077CBD2-9568-4818-A957-591388737E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"07282EC3-346F-466C-96E3-B881BD3E27ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"C55576BF-674B-416B-83AA-29F1B850D785"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.11:*:*:*:*:*:*:*","matchCriteriaId":"45439E8E-2275-40DA-AE29-309F51E7781A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.12:*:*:*:*:*:*:*","matchCriteriaId":"E537D0FC-FF01-4442-BE0E-63F7516A9964"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.13:*:*:*:*:*:*:*","matchCriteriaId":"3C80C0D7-C57E-43AD-ABAC-5F7A7C1CA755"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"C08CB344-7E2C-44EA-903B-833F5EBE5927"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4EDD10C-10C8-4D4C-9DC4-5F1A8557899D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"606DAABD-B67F-4FF2-9335-FEB5E4D63AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"FB3A50A9-FD8F-4803-80EF-0D02788C9713"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"2EF59C7B-9B93-4B03-987F-BCC3E3940049"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"2218F66F-1111-4731-B584-F9CC0575EE50"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"2173265A-2E85-4289-8E4E-AD6DA7064B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:alpha2:*:*:*:*:*:*","matchCriteriaId":"DF39A30B-674B-4960-9C1D-2C353CBD73D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:beta3:*:*:*:*:*:*","matchCriteriaId":"CC1EB041-8A4A-4A3F-B5E3-30A2B333FE9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:beta4:*:*:*:*:*:*","matchCriteriaId":"17E3BD9C-FE67-4DA3-A505-2705DAC8B90D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.3:beta5:*:*:*:*:*:*","matchCriteriaId":"FC494BB0-0F33-4381-AF62-19A85B3F0798"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"DCD1D484-B8BF-494A-802E-C575C2BEBE26"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"37EFF8D6-7593-4351-9EF9-6FB0C38069FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"BFF84EDC-3422-4F79-B71B-DCD1A5A4CF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"589A8787-52DF-4343-B013-9F9D0C73B1F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"049C6AF1-8D59-40BD-885B-3B809A8F1546"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"A4DBD36B-7990-43F6-9DD4-29E9F45F681D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"984D91D5-6DA5-47A1-ABC6-FEEFE5433749"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.11:*:*:*:*:*:*:*","matchCriteriaId":"6FB18C2C-684B-4C4D-8FE5-570C233DBCE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta1:*:*:*:*:*:*","matchCriteriaId":"355B4363-9C50-41A1-A721-82B8CD323BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta2:*:*:*:*:*:*","matchCriteriaId":"DD104382-CB02-4339-874E-10675742D795"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta3:*:*:*:*:*:*","matchCriteriaId":"C835FE2E-D8FC-407D-B1CE-5A0F4D53A693"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta4:*:*:*:*:*:*","matchCriteriaId":"DA35B38F-DDBF-42BC-8904-E58292C234CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta5:*:*:*:*:*:*","matchCriteriaId":"B4EAB97E-3490-47BF-8F0D-861BFFCE3512"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta6:*:*:*:*:*:*","matchCriteriaId":"6EBB1F76-8267-45AA-9A21-78B5C8DE2D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta7:*:*:*:*:*:*","matchCriteriaId":"2D04F01F-781A-46E9-A8EF-6542B0BFC1C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta8:*:*:*:*:*:*","matchCriteriaId":"7114B202-BADD-4678-83C8-6732FD38E9AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:beta9:*:*:*:*:*:*","matchCriteriaId":"2C5217EE-48BD-42E9-A1FC-9D74FC8E3C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.12:rc1:*:*:*:*:*:*","matchCriteriaId":"5ADBE1E3-0307-482D-9568-B4BBA791CACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.13:*:*:*:*:*:*:*","matchCriteriaId":"430D2D01-AA6B-493D-88D8-B261B4B09853"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.13:rc1:*:*:*:*:*:*","matchCriteriaId":"8392C41E-F9D2-499D-AF5E-C345BC90A9BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.13:rc2:*:*:*:*:*:*","matchCriteriaId":"B7F6C7F2-CD66-41E4-8AE2-B88946E041C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.14:beta1:*:*:*:*:*:*","matchCriteriaId":"9294D41D-055F-4AFF-8A68-24F3226EC8E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodewords_project:nodewords:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"E5C8EB10-A534-4171-AC66-96B646B395E9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*","matchCriteriaId":"F8B1170D-AD33-4C7A-892D-63AC71B032CF"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"5654","Ordinal":"1","Title":"CVE-2012-5654","CVE":"CVE-2012-5654","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"5654","Ordinal":"1","NoteData":"The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the (1) description, (2) dc.description or (3) og:description meta tags.","Type":"Description","Title":"CVE-2012-5654"},{"CveYear":"2012","CveId":"5654","Ordinal":"2","NoteData":"2013-01-02","Type":"Other","Title":"Published"}]}}}