The Atom 4.7 before 4.7.x-1.0 and 5.x before 5.x-1.0 module for Drupal does not properly manage permissions for node (1) titles, (2) teasers, and (3) bodies, which might allow remote attackers to gain access to syndicated content.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Atom_module | Drupal | * | 4.7 (including) |
| Atom_module | Drupal | * | 5.0 (including) |