Security Advisory
CVE-2013-7066
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit permissions to a node that references a private node.