CVE-2012-2304

CVE-2012-2304 describes an information disclosure vulnerability in the Linkit module for Drupal versions 7.x-2.x prior to 7.x-2.3. When an entity access module is in use, Linkit fails to enforce permissions during entity searches, allowing unauthenticated remote attackers to access sensitive information. With a CVSS score of 4.3 (medium severity), this vulnerability has a network attack vector and medium attack complexity, resulting in a potential partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.