CVE Catalog
CVE-2015-8761
CriticalSummary
The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, allowing remote administrators with the 'Import value sets' permission to execute arbitrary PHP code via the exported values list in a ctools import.
Risk Assessment
This vulnerability could lead to remote code execution, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to update the Values module to version 7.x-1.2 or later to mitigate this security issue.
Original NVD description (English source)
The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which allows remote administrators with the "Import value sets" permission to execute arbitrary PHP code via the exported values list in a ctools import.