CVE-2013-0318 The admin page in the Banckle Chat module for Drupal does not properly restrict access, which allows remote attackers to bypass intended restrictions via unspecified vectors.
HighCVSS 10.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The admin page in the Banckle Chat module for Drupal does not properly restrict access, which allows remote attackers to bypass intended restrictions via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| banckle chat project banckle chat | All versions | No fix listed |
References
- drupal.org vendor-advisory
- [oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules mailing-list