Drupal Notify Module Information Disclosure Security Issue

 A security issue has been identified in the Notify module for Drupal, which can be exploited by malicious users to disclose potentially sensitive information.

The security issue is caused due to the module not properly verifying permissions when handling notification emails and can be exploited to disclose otherwise restricted information related to nodes.

Successful exploitation requires the site to use some form of access control and must be configured to include nodes with protected content in notifications.