Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-4379
cve-2013-4379
drupal
make meeting scheduler
access restrictions
remote attackers
nvd
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
54.0%
The Make Meeting Scheduler module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to bypass intended access restrictions for a poll via a direct request to the node’s URL instead of the hashed URL.
Affected configurations
Node
sebastien_corbinmake_meeting_scheduler_moduleMatch6.x-1.0
ORsebastien_corbinmake_meeting_scheduler_moduleMatch6.x-1.1
ORsebastien_corbinmake_meeting_scheduler_moduleMatch6.x-1.2
ORsebastien_corbinmake_meeting_scheduler_moduleMatch6.x-1.xdev
drupaldrupalMatch-
Related
cvelist
cvelist
CVE-2013-4379
2022-10-03 16:14:58
nvd
nvd
CVE-2013-4379
2013-10-09 17:55:05
drupal
drupal
SA-CONTRIB-2013-073 - Make Meeting Scheduler - Access Bypass
2013-09-04 00:00:00
prion
prion
Design/Logic Flaw
2013-10-09 17:55:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
54.0%
Related for CVE-2013-4379