CVE-2013-4609

EPSS 0.19%
Published 17.06.2013 11:38:53
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
CVE-Watchlists
Login
Open
Login

REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows remote authenticated users to bypass intended access restrictions via (1) the Online Designer or (2) the Data Dictionary upload, as demonstrated by an eval call.

Affected products Warnungen 0 Metrics 2 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Project-redcap ≫ Redcap Version4.13.18

Project-redcap ≫ Redcap Version4.14.5

Project-redcap ≫ Redcap Version4.14.6

Project-redcap ≫ Redcap Version4.15.0

Project-redcap ≫ Redcap Version4.15.1

Project-redcap ≫ Redcap Version4.15.2

Project-redcap ≫ Redcap Version4.15.3

Project-redcap ≫ Redcap Version4.15.4

Project-redcap ≫ Redcap Version5.0.0

Project-redcap ≫ Redcap Version5.0.1

Project-redcap ≫ Redcap Version5.0.2

Project-redcap ≫ Redcap Version5.1.0

Project-redcap ≫ Redcap Version5.1.1

Project-redcap ≫ Redcap Version5.1.2

Vanderbilt ≫ Redcap Version <= 5.0.3

Vanderbilt ≫ Redcap Version4.14.0

Vanderbilt ≫ Redcap Version4.14.1

Vanderbilt ≫ Redcap Version4.14.2

Vanderbilt ≫ Redcap Version4.14.3

Vanderbilt ≫ Redcap Version4.14.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.19%	0.379

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf

https://nvd.nist.gov/vuln/detail/CVE-2013-4609

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-4609

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-4609

EUVD