CVE-2012-5652
Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded...
Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.
Exploit likelihood
What each source reports
NVD Score used
Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.
- Record
CVE-2012-5652- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.
- Record
CVE-2012-5652- Updated
- 2026-11-02
EUVDEUVD-2012-5536No score
Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.
- Record
EUVD-2012-5536- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fxww-mhrr-rf6rNo score
Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded...
Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.
- Record
GHSA-fxww-mhrr-rf6r- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal6Debian:6.0 From an advisory covering 7 CVEs | before 6.28-1, plus listed versions 6.18-16.18-1squeeze16.20-16.20-1~bpo50+16.20-1~bpo60+1 Show 6 moreShow less6.20-26.22-16.22-1~bpo60+16.26-16.26-1.16.26-1~bpo60+1 | 6.28-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5652 is a medium vulnerability (CVSS 5.0) in Drupal, published January 3, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.44%, the 84th percentile. No source names a fixed version.