Posted by jbrauer on August 11, 2010 at 9:58pm
| Download | Size | md5 hash |
|---|---|---|
| prepopulate-6.x-2.0.tar.gz | 9.66 KB | f80ac762e58f70c30e4e65fea59bb6cd |
| prepopulate-6.x-2.0.zip | 11.6 KB | 021823db11ed8d64092e25eeb899c70b |
Last updated: December 24, 2010 - 23:40
Advisory ID: DRUPAL-SA-CONTRIB-2010-086 - PREPOPULATE ACCESS BYPASS
The Prepopulate module provides the ability for form fields to be pre-populated via the request sent for the form.
The module is vulnerable to access bypass which would allow a malicious user to change the value of fields they would not otherwise have access to alter.
For more information see the Security Advisory at http://drupal.org/node/880696