CVE-2012-1635

CVE-2012-1635 describes an access restriction bypass vulnerability in the revisioning module for Drupal 7.x-1.x before 7.x-1.3. The flaw allows remote attackers to bypass intended access controls by incorrectly checking the current user's permissions when evaluating other users, potentially leading to the disclosure of sensitive, unpublished content, particularly when used with modules like XML sitemap. This vulnerability has a CVSS score of 6.4 (Medium), indicating a network-based attack with low complexity, requiring no authentication, and resulting in partial confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.