Lucene search
HistoryApr 29, 2014 - 2:38 p.m.
CVE-2013-7063
cve-2013-7063
invitation module
drupal
remote attackers
sensitive information
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.2%
The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views.
Affected configurations
Node
invitation_projectinvitationMatch7.x-2.0drupal
ORinvitation_projectinvitationMatch7.x-2.1drupal
Related
drupal
drupal
SA-CONTRIB-2013-093 - Invitation - Access Bypass
2013-11-20 00:00:00
ubuntucve
ubuntucve
CVE-2013-7063
2014-04-29 00:00:00
cvelist
cvelist
CVE-2013-7063
2014-04-29 14:00:00
nvd
nvd
CVE-2013-7063
2014-04-29 14:38:43
prion
prion
Default configuration
2014-04-29 14:38:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.2%
Related for CVE-2013-7063