CVE-2013-7063 The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views.
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| invitation project invitation | = 7.x-2.0 | No fix listed |
| invitation project invitation | = 7.x-2.1 | No fix listed |
References
- [oss-security] 20131206 CVE request for Drupal core, and contributed modules mailing-list
- [oss-security] 20131211 Re: CVE request for Drupal core, and contributed modules mailing-list
- drupal.org vendor-advisory