medium5.0
CVE-2013-7063
The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified def…
Impact
The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invitation Project | Invitation | Versions 7.x-2.0, 7.x-2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2013/12/06/7
- http://www.openwall.com/lists/oss-security/2013/12/12/1
- https://drupal.org/node/2140097
- http://www.openwall.com/lists/oss-security/2013/12/06/7
- http://www.openwall.com/lists/oss-security/2013/12/12/1
- https://drupal.org/node/2140097