Sensitive Event Registration Information Disclosure Vulnerability in Entity Registration Module for Drupal

CVE-2015-7880 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:N

The Entity Registration module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to obtain sensitive event registration information by leveraging the "Register other accounts" permission and knowledge of usernames.

Learn more about our User Device Pen Test.