CVE-2015-8602

CVE-2015-8602 describes a permission bypass vulnerability in the Token Insert Entity module 7.x-1.x before 7.x-1.1 for Drupal. Authenticated users with specific permissions could exploit this to insert tokens, embedding rendered entities and potentially disclosing sensitive information. With a CVSS score of 3.5, this vulnerability is of low severity, requiring medium attack complexity and authenticated access, leading to a partial impact on confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.