Lucene search

[email protected]CVE-2013-2123

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2013-2123

2022-10-0316:15:01

CWE-264

[email protected]

web.nvd.nist.gov

cve-2013-2123

node access

user reference

drupal

access restriction

remote attackers

content modification

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.5%

JSON

The Node access user reference module 6.x-3.x before 6.x-3.5 and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to content containing a user reference field when the author update/delete grants are enabled and the author’s user account is deleted, which allows remote attackers to modify the content via unspecified vectors.

Affected configurations

NVD

Node

node_access_user_reference_projectnodeaccess_userreference_moduleMatch6.x-3.0

node_access_user_reference_projectnodeaccess_userreference_moduleMatch6.x-3.0rc1

node_access_user_reference_projectnodeaccess_userreference_moduleMatch6.x-3.0rc2

node_access_user_reference_projectnodeaccess_userreference_moduleMatch6.x-3.0rc3

node_access_user_reference_projectnodeaccess_userreference_moduleMatch6.x-3.0rc4

node_access_user_reference_projectnodeaccess_userreference_moduleMatch6.x-3.0rc5

node_access_user_reference_projectnodeaccess_userreference_moduleMatch6.x-3.0rc6

node_access_user_reference_projectnodeaccess_userreference_moduleMatch6.x-3.1

node_access_user_reference_projectnodeaccess_userreference_moduleMatch6.x-3.2

node_access_user_reference_projectnodeaccess_userreference_moduleMatch6.x-3.3

node_access_user_reference_projectnodeaccess_userreference_moduleMatch6.x-3.4

node_access_user_reference_projectnodeaccess_userreference_moduleMatch6.x-3.xdev

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.0

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.0rc1

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.0rc2

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.0rc3

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.0rc4

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.0rc5

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.1

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.2

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.3

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.4

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.5

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.6

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.7

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.8

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.9

node_access_user_reference_projectnodeaccess_userreference_moduleMatch7.x-3.xdev

AND

drupaldrupalMatch-

CPENameOperatorVersion
node_access_user_reference_project:nodeaccess_userreference_modulenode access user reference project nodeaccess userreference moduleeq6.x-3.0
node_access_user_reference_project:nodeaccess_userreference_modulenode access user reference project nodeaccess userreference moduleeq6.x-3.1
node_access_user_reference_project:nodeaccess_userreference_modulenode access user reference project nodeaccess userreference moduleeq6.x-3.2
node_access_user_reference_project:nodeaccess_userreference_modulenode access user reference project nodeaccess userreference moduleeq6.x-3.3
node_access_user_reference_project:nodeaccess_userreference_modulenode access user reference project nodeaccess userreference moduleeq6.x-3.4
node_access_user_reference_project:nodeaccess_userreference_modulenode access user reference project nodeaccess userreference moduleeq6.x-3.x
node_access_user_reference_project:nodeaccess_userreference_modulenode access user reference project nodeaccess userreference moduleeq7.x-3.0
node_access_user_reference_project:nodeaccess_userreference_modulenode access user reference project nodeaccess userreference moduleeq7.x-3.1
node_access_user_reference_project:nodeaccess_userreference_modulenode access user reference project nodeaccess userreference moduleeq7.x-3.2
node_access_user_reference_project:nodeaccess_userreference_modulenode access user reference project nodeaccess userreference moduleeq7.x-3.3

CPE	Name	Operator	Version
node_access_user_reference_project:nodeaccess_userreference_module	node access user reference project nodeaccess userreference module	eq	6.x-3.0
node_access_user_reference_project:nodeaccess_userreference_module	node access user reference project nodeaccess userreference module	eq	6.x-3.1
node_access_user_reference_project:nodeaccess_userreference_module	node access user reference project nodeaccess userreference module	eq	6.x-3.2
node_access_user_reference_project:nodeaccess_userreference_module	node access user reference project nodeaccess userreference module	eq	6.x-3.3
node_access_user_reference_project:nodeaccess_userreference_module	node access user reference project nodeaccess userreference module	eq	6.x-3.4
node_access_user_reference_project:nodeaccess_userreference_module	node access user reference project nodeaccess userreference module	eq	6.x-3.x
node_access_user_reference_project:nodeaccess_userreference_module	node access user reference project nodeaccess userreference module	eq	7.x-3.0
node_access_user_reference_project:nodeaccess_userreference_module	node access user reference project nodeaccess userreference module	eq	7.x-3.1
node_access_user_reference_project:nodeaccess_userreference_module	node access user reference project nodeaccess userreference module	eq	7.x-3.2
node_access_user_reference_project:nodeaccess_userreference_module	node access user reference project nodeaccess userreference module	eq	7.x-3.3