CVE-2013-4230
Last modified
CVE-2013-4230 is a vulnerability of currently unknown severity. The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which allows remote authenticated users with the "Who can read data submitted to this webform" permission to delete arbitrary submissions via unspecified vectors.. EPSS estimates a 1.21% chance of exploitation in the next 30 days.
Description
The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which allows remote authenticated users with the "Who can read data submitted to this webform" permission to delete arbitrary submissions via unspecified vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Monster Menus Project | Monster Menus | 6.x-6.19 | — |
| Monster Menus Project | Monster Menus | 6.x-6.22 | — |
| Monster Menus Project | Monster Menus | 6.x-6.23 | — |
| Monster Menus Project | Monster Menus | 6.x-6.24 | — |
| Monster Menus Project | Monster Menus | 6.x-6.25 | — |
| Monster Menus Project | Monster Menus | 6.x-6.26 | — |
| Monster Menus Project | Monster Menus | 6.x-6.27 | — |
| Monster Menus Project | Monster Menus | 6.x-6.29 | — |
| Monster Menus Project | Monster Menus | 6.x-6.30 | — |
| Monster Menus Project | Monster Menus | 6.x-6.31 | — |
| Monster Menus Project | Monster Menus | 6.x-6.32 | — |
| Monster Menus Project | Monster Menus | 6.x-6.33 | — |
| Monster Menus Project | Monster Menus | 6.x-6.34 | — |
| Monster Menus Project | Monster Menus | 6.x-6.35 | — |
| Monster Menus Project | Monster Menus | 6.x-6.36 | — |
| Monster Menus Project | Monster Menus | 6.x-6.37 | — |
| Monster Menus Project | Monster Menus | 6.x-6.38 | — |
| Monster Menus Project | Monster Menus | 6.x-6.41 | — |
| Monster Menus Project | Monster Menus | 6.x-6.42 | — |
| Monster Menus Project | Monster Menus | 6.x-6.43 | — |
| Monster Menus Project | Monster Menus | 6.x-6.44 | — |
| Monster Menus Project | Monster Menus | 6.x-6.48 | — |
| Monster Menus Project | Monster Menus | 6.x-6.53 | — |
| Monster Menus Project | Monster Menus | 6.x-6.56 | — |
| Monster Menus Project | Monster Menus | 6.x-6.57 | — |
| Monster Menus Project | Monster Menus | 6.x-6.59 | — |
| Monster Menus Project | Monster Menus | 6.x-6.60 | — |
| Monster Menus Project | Monster Menus | 7.x-1.0 | — |
| Monster Menus Project | Monster Menus | 7.x-1.1 | — |
| Monster Menus Project | Monster Menus | 7.x-1.2 | — |
| Monster Menus Project | Monster Menus | 7.x-1.3 | — |
| Monster Menus Project | Monster Menus | 7.x-1.4 | — |
| Monster Menus Project | Monster Menus | 7.x-1.5 | — |
| Monster Menus Project | Monster Menus | 7.x-1.6 | — |
| Monster Menus Project | Monster Menus | 7.x-1.7 | — |
| Monster Menus Project | Monster Menus | 7.x-1.8 | — |
| Monster Menus Project | Monster Menus | 7.x-1.9 | — |
| Monster Menus Project | Monster Menus | 7.x-1.10 | — |
| Monster Menus Project | Monster Menus | 7.x-1.11 | — |
| Monster Menus Project | Monster Menus | 7.x-1.12 | — |
| Monster Menus Project | Monster Menus | 7.x-1.x | Dev |
References
- http://secunia.com/advisories/54391Vendor Advisory
- https://drupal.org/node/2059823Vendor Advisory
- http://secunia.com/advisories/54391Vendor Advisory
- https://drupal.org/node/2059823Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-4230?
How severe is CVE-2013-4230?
How do I fix CVE-2013-4230?
Are you affected by CVE-2013-4230?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST