CVE-2013-0226
Last modified
CVE-2013-0226 is a vulnerability of currently unknown severity. The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows (1) remote authenticated users with the "view shortcuts" permission to read nodes or (2) remote authenticated users with the "admin shortcuts" permission to read, edit, or delete nodes via unspecified vectors.. EPSS estimates a 0.95% chance of exploitation in the next 30 days.
Description
The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows (1) remote authenticated users with the "view shortcuts" permission to read nodes or (2) remote authenticated users with the "admin shortcuts" permission to read, edit, or delete nodes via unspecified vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zugec Ivan | Keyboard Shortcut Utility | 7.x-1.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-0226?
How severe is CVE-2013-0226?
How do I fix CVE-2013-0226?
Are you affected by CVE-2013-0226?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
