Vulnerabilities > OWS > Scald > 7.x.1.3

DATE CVE VULNERABILITY TITLE RISK
2015-09-21 CVE-2015-7305 Information Exposure vulnerability in OWS Scald
The Scald module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to fields, which allows remote attackers to obtain sensitive atom property information via vectors involving a "debug context."
network
low complexity
ows CWE-200
5.0