CVE-2015-3391: Path Breadcrumbs Project Path Breadcrumbs

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The Path Breadcrumbs module before 7.x-3.2 for Drupal allows remote attackers to bypass intended access restrictions and obtain sensitive node titles by reading a 403 Not Found page.

Affected products

• Path Breadcrumbs Project Path Breadcrumbs: up to and including 7.x-3.1

Published 2015-04-21. Last modified 2026-06-17.