CVE-2013-0245

The printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x before 7.19 does not properly restrict access to node that are part of a book outline, which allows remote authenticated users with the "access printer-friendly version" permission to read node titles and possibly node content via unspecified vectors.

• CWE-264

• http://osvdb.org/89305
• http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html
• http://seclists.org/fulldisclosure/2013/Jan/120
• http://seclists.org/oss-sec/2013/q1/211
• http://secunia.com/advisories/51717Vendor Advisory
• http://www.debian.org/security/2013/dsa-2776
• https://drupal.org/SA-CORE-2013-001Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81380
• http://osvdb.org/89305
• http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html
• http://seclists.org/fulldisclosure/2013/Jan/120
• http://seclists.org/oss-sec/2013/q1/211
• http://secunia.com/advisories/51717Vendor Advisory
• http://www.debian.org/security/2013/dsa-2776
• https://drupal.org/SA-CORE-2013-001Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81380

Published

Jul 16, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0239Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x befor…
• CVE-2013-0240Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3…
• CVE-2013-0241The QXL display driver in QXL Virtual GPU 0.1.0 allows local…
• CVE-2013-0242Buffer overflow in the extend_buffers function in the regula…
• CVE-2013-0243haskell-tls-extra before 0.6.1 has Basic Constraints attribu…7.4
• CVE-2013-0244Cross-site scripting (XSS) vulnerability in Drupal 6.x befor…
• CVE-2013-0246The Image module in Drupal 7.x before 7.19, when a private f…
• CVE-2013-0247OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2…
• CVE-2013-0248The default configuration of javax.servlet.context.tempdir i…
• CVE-2013-0249Stack-based buffer overflow in the Curl_sasl_create_digest_m…
• CVE-2013-0250The init_nss_hash function in exec/totemcrypto.c in Corosync…
• CVE-2013-0251Stack-based buffer overflow in llogincircuit.cc in latd 1.25…