5.8

CVE-2013-2123

The Node access user reference module 6.x-3.x before 6.x-3.5 and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to content containing a user reference field when the author update/delete grants are enabled and the author's user account is deleted, which allows remote attackers to modify the content via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 6.x-3.0 Update rc1
   Drupal ≫ Drupal Version -
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 6.x-3.0 Update rc2
   Drupal ≫ Drupal Version -
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 6.x-3.0 Update rc3
   Drupal ≫ Drupal Version -
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 6.x-3.0 Update rc4
   Drupal ≫ Drupal Version -
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 6.x-3.0 Update rc5
   Drupal ≫ Drupal Version -
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 6.x-3.0 Update rc6
   Drupal ≫ Drupal Version -
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 6.x-3.x Update dev
   Drupal ≫ Drupal Version -
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 7.x-3.0 Update rc1
   Drupal ≫ Drupal Version -
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 7.x-3.0 Update rc2
   Drupal ≫ Drupal Version -
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 7.x-3.0 Update rc3
   Drupal ≫ Drupal Version -
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 7.x-3.0 Update rc4
   Drupal ≫ Drupal Version -
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 7.x-3.0 Update rc5
   Drupal ≫ Drupal Version -
Node Access User Reference Project ≫ Nodeaccess Userreference Module Version 7.x-3.x Update dev
   Drupal ≫ Drupal Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.31% 0.669
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:N/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.openwall.com/lists/oss-security/2013/05/29/9
https://drupal.org/node/2007072
Patch
https://drupal.org/node/2007078
Patch
https://drupal.org/node/2007122
Vendor Advisory