CVE-2013-4594

2014-10-2522:00:00

redhat

www.cve.org

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.3%

JSON

The Payment for Webform module 7.x-1.x before 7.x-1.5 for Drupal does not restrict access by anonymous users, which allows remote anonymous users to use the payment of other anonymous users when submitting a form that requires payment.

References

seclists.org/oss-sec/2013/q4/317

secunia.com/advisories/55431

drupal.org/node/2128345

drupal.org/node/2129373