Design/Logic Flaw

2013-08-2822:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.4%

JSON

The Fast Permissions Administration module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.3 for Drupal does not properly restrict access to the modal content callback, which allows remote attackers to obtain unspecified access to the permissions edit form.

CPENameOperatorVersion
fast_permission_administrationeq6.120.20
fast_permission_administrationeq6.120.21
fast_permission_administrationeq6.120.22
fast_permission_administrationeq6.120.23
fast_permission_administrationeq6.120.24
fast_permission_administrationeq6.x-2.x dev
fast_permission_administrationeq7.120.20
fast_permission_administrationeq7.120.21
fast_permission_administrationeq7.120.22
fast_permission_administrationeq7.x-2.x dev

Name	Operator	Version
fast_permission_administration	eq	6.120.20
fast_permission_administration	eq	6.120.21
fast_permission_administration	eq	6.120.22
fast_permission_administration	eq	6.120.23
fast_permission_administration	eq	6.120.24
fast_permission_administration	eq	6.x-2.x dev
fast_permission_administration	eq	7.120.20
fast_permission_administration	eq	7.120.21
fast_permission_administration	eq	7.120.22
fast_permission_administration	eq	7.x-2.x dev