CVE-2012-5570

CVE-2012-5570 describes an information disclosure vulnerability in the Basic webmail module for Drupal, versions 6.x-1.x prior to 6.x-1.2. Authenticated users with specific permissions can exploit this flaw to read the email addresses of other arbitrary users. The vulnerability has a CVSS v3.1 score of 4.3 (Medium), indicating a network-based attack with low complexity, requiring low privileges, and resulting in low confidentiality impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.