CVE-2013-4187

Опубликовано: 30 янв. 2020

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

The Flippy module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to nodes, which allows remote authenticated users with the permission to access content to read a link or alias to a restricted node.

Ссылки

http://www.openwall.com/lists/oss-security/2013/08/01/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/08/10/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/08/10/4
Mailing List
Third Party Advisory
https://drupal.org/node/2050827
Third Party Advisory
https://drupal.org/node/2054701
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/08/01/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/08/10/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/08/10/4
Mailing List
Third Party Advisory
https://drupal.org/node/2050827
Third Party Advisory
https://drupal.org/node/2054701
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:flippy_project:flippy:*:*:*:*:*:drupal:*:*

Версия от 7.x-1.0 (включая) до 7.x-1.2 (включая)

cpe:2.3:a:flippy_project:flippy:7.x-1.x:dev:*:*:*:drupal:*:*

EPSS

Процентиль: 71%

0.0068

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-cc75-4632-rm7f

github

почти 4 года назад