2.1
CVE-2013-4498
- EPSS 0.95%
- Veröffentlicht 17.05.2014 20:55:02
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginThe Spaces OG submodule in the Spaces module 6.x-3.x before 6.x-3.7 for Drupal does not properly delete organic group group spaces content when using the option to move to a new group, which causes the content to be "orphaned" and allows remote authenticated users with the "access content" permission to obtain sensitive information via vectors involving a rebuild access for the site or content.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Florian Weber ≫ Spaces Version 6.x-3.0
Florian Weber ≫ Spaces Version 6.x-3.0 Update alpha1
Florian Weber ≫ Spaces Version 6.x-3.0 Update alpha2
Florian Weber ≫ Spaces Version 6.x-3.0 Update beta1
Florian Weber ≫ Spaces Version 6.x-3.0 Update beta2
Florian Weber ≫ Spaces Version 6.x-3.0 Update beta3
Florian Weber ≫ Spaces Version 6.x-3.0 Update beta4
Florian Weber ≫ Spaces Version 6.x-3.0 Update beta5
Florian Weber ≫ Spaces Version 6.x-3.0 Update beta6
Florian Weber ≫ Spaces Version 6.x-3.0 Update r1
Florian Weber ≫ Spaces Version 6.x-3.0 Update r2
Florian Weber ≫ Spaces Version 6.x-3.1
Florian Weber ≫ Spaces Version 6.x-3.2
Florian Weber ≫ Spaces Version 6.x-3.3
Florian Weber ≫ Spaces Version 6.x-3.4
Florian Weber ≫ Spaces Version 6.x-3.5
Florian Weber ≫ Spaces Version 6.x-3.6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.95% | 0.565 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 2.1 | 3.9 | 2.9 |
AV:N/AC:H/Au:S/C:P/I:N/A:N
|
http://seclists.org/oss-sec/2013/q4/210
https://drupal.org/node/2118717
https://drupal.org/node/2118745