Default configuration

2014-04-2914:38:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%

JSON

The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views.

CPENameOperatorVersion
invitationeq7.120.20
invitationeq7.120.21

CPE	Name	Operator	Version
	invitation	eq	7.120.20
	invitation	eq	7.120.21

References

www.openwall.com/lists/oss-security/2013/12/06/7

www.openwall.com/lists/oss-security/2013/12/12/1

drupal.org/node/2140097