cve-2013-0246
Vulnerability from cvelistv5
Published
2013-07-16 18:00
Modified
2024-09-16 20:57
Severity ?
EPSS score ?
Summary
The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T14:18:09.573Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html" }, { "name": "[oss-security] 20130130 Re: CVE", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "http://seclists.org/oss-sec/2013/q1/211" }, { "name": "20130116 [Security-news] SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities", "tags": [ "mailing-list", "x_refsource_FULLDISC", "x_transferred" ], "url": "http://seclists.org/fulldisclosure/2013/Jan/120" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://drupal.org/SA-CORE-2013-001" }, { "name": "51717", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/51717" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "descriptions": [ { "lang": "en", "value": "The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2013-07-16T18:00:00Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html" }, { "name": "[oss-security] 20130130 Re: CVE", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "http://seclists.org/oss-sec/2013/q1/211" }, { "name": "20130116 [Security-news] SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities", "tags": [ "mailing-list", "x_refsource_FULLDISC" ], "url": "http://seclists.org/fulldisclosure/2013/Jan/120" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://drupal.org/SA-CORE-2013-001" }, { "name": "51717", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/51717" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2013-0246", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html" }, { "name": "[oss-security] 20130130 Re: CVE", "refsource": "MLIST", "url": "http://seclists.org/oss-sec/2013/q1/211" }, { "name": "20130116 [Security-news] SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2013/Jan/120" }, { "name": "https://drupal.org/SA-CORE-2013-001", "refsource": "CONFIRM", "url": "https://drupal.org/SA-CORE-2013-001" }, { "name": "51717", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/51717" } ] } } } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2013-0246", "datePublished": "2013-07-16T18:00:00Z", "dateReserved": "2012-12-06T00:00:00Z", "dateUpdated": "2024-09-16T20:57:50.333Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "fkie_nvd": { "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"48C33CAB-4633-418C-B162-20A2EC24E8DD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC3B1750-17AD-4386-B6EE-1AFC9CDFB6C4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*\", \"matchCriteriaId\": \"9E0C1873-22A6-4CE9-853D-2A40BD3D9E62\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*\", \"matchCriteriaId\": \"9F6DF608-0DA2-455F-AD28-7BE4A7548E48\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*\", \"matchCriteriaId\": \"7BCC306D-EB5D-4784-B0B1-B4F9370796F7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*\", \"matchCriteriaId\": \"5639A5F3-CD18-451C-BA5A-3336C42BED83\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*\", \"matchCriteriaId\": \"5B0A10CA-F59E-48AC-97E9-8476F63BAEDB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*\", \"matchCriteriaId\": \"07B7917C-5934-4AFF-B3DB-BE9B099B27FB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*\", \"matchCriteriaId\": \"16731B53-3CD1-4B98-947B-7621162D8DB3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*\", \"matchCriteriaId\": \"BD738402-A50E-4AEB-8F42-607F52DE5540\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*\", \"matchCriteriaId\": \"199AC10C-6E65-409B-8658-E26240B27E1B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B378BEF-B070-4955-A6B3-8F2ACBA96832\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"19EC9A36-5EDC-4519-802E-BEA69B18800A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"8C281EA7-8AE1-4D5A-B03B-B3BE37740195\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*\", \"matchCriteriaId\": \"024CF5B1-1875-4785-ACAF-35ECCC7914A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F446903-51AC-4FA3-BA90-C2EA59BBDB01\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1FE86CC5-956E-4F16-BE7B-2B1CAAEB5C40\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F0AC1B21-D3BE-4B6A-AE40-8B395E81DD50\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7E5E8A73-1C02-4900-BC30-83084DC8371C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A92A41E3-BF0F-49BD-9F0F-5FDC11BF2499\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"937C3149-3F34-40D8-964D-FB65EBDF0BC5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"90CD183A-3777-44F9-8CA6-8E802058D099\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"68C0CC63-558B-4750-8293-926BE9EAD42C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CA66BCA5-3934-449E-BAD3-D0DFBF4A04BE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5030281C-CD4F-4106-A100-332A4C3C2AEB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D408134A-29E8-4D6A-9352-DB7F9CF55FA3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3B08C41E-2357-44D5-A3A7-75389B343B8C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E9F40588-308A-4BA7-AE62-5DCC7D7528EE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E41BD65A-F39B-42C5-8776-CE09345A531D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CBAFBC02-38E9-41F3-8944-6F6AB0A85941\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9069C99D-C935-4272-B7F4-172CFD246835\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"41BE2EAA-CC60-4EFA-9E75-61EDA0EB69B5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"71CABDC4-0E47-4E33-9075-79E0D59D9A92\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"74A5893C-A855-4C49-A17A-83B6172C0496\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F860666-578F-4B48-ABCA-1B5F2697DEAB\"}]}]}]", "descriptions": "[{\"lang\": \"en\", \"value\": \"The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors.\"}, {\"lang\": \"es\", \"value\": \"El m\\u00f3dulo Image en Drupal v7.x anterior a v7.19, cuando un sistema de ficheros privado es utilizado, no restringe adecuadamente el acceso a im\\u00e1genes derivadas, lo que permite a atacantes remotos leer im\\u00e1genes derivadas de im\\u00e1genes restringidas a trav\\u00e9s de vectores no especificados.\"}]", "id": "CVE-2013-0246", "lastModified": "2024-11-21T01:47:09.000", "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:N/A:N\", \"baseScore\": 4.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}", "published": "2013-07-16T18:55:01.160", "references": "[{\"url\": \"http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://seclists.org/fulldisclosure/2013/Jan/120\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://seclists.org/oss-sec/2013/q1/211\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/51717\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://drupal.org/SA-CORE-2013-001\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://seclists.org/fulldisclosure/2013/Jan/120\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://seclists.org/oss-sec/2013/q1/211\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/51717\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://drupal.org/SA-CORE-2013-001\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]", "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-264\"}]}]" }, "nvd": "{\"cve\":{\"id\":\"CVE-2013-0246\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2013-07-16T18:55:01.160\",\"lastModified\":\"2024-11-21T01:47:09.000\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors.\"},{\"lang\":\"es\",\"value\":\"El m\u00f3dulo Image en Drupal v7.x anterior a v7.19, cuando un sistema de ficheros privado es utilizado, no restringe adecuadamente el acceso a im\u00e1genes derivadas, lo que permite a atacantes remotos leer im\u00e1genes derivadas de im\u00e1genes restringidas a trav\u00e9s de vectores no especificados.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:N/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"48C33CAB-4633-418C-B162-20A2EC24E8DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC3B1750-17AD-4386-B6EE-1AFC9CDFB6C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E0C1873-22A6-4CE9-853D-2A40BD3D9E62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F6DF608-0DA2-455F-AD28-7BE4A7548E48\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BCC306D-EB5D-4784-B0B1-B4F9370796F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*\",\"matchCriteriaId\":\"5639A5F3-CD18-451C-BA5A-3336C42BED83\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B0A10CA-F59E-48AC-97E9-8476F63BAEDB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B7917C-5934-4AFF-B3DB-BE9B099B27FB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*\",\"matchCriteriaId\":\"16731B53-3CD1-4B98-947B-7621162D8DB3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD738402-A50E-4AEB-8F42-607F52DE5540\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*\",\"matchCriteriaId\":\"199AC10C-6E65-409B-8658-E26240B27E1B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B378BEF-B070-4955-A6B3-8F2ACBA96832\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"19EC9A36-5EDC-4519-802E-BEA69B18800A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C281EA7-8AE1-4D5A-B03B-B3BE37740195\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"024CF5B1-1875-4785-ACAF-35ECCC7914A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F446903-51AC-4FA3-BA90-C2EA59BBDB01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FE86CC5-956E-4F16-BE7B-2B1CAAEB5C40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0AC1B21-D3BE-4B6A-AE40-8B395E81DD50\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E5E8A73-1C02-4900-BC30-83084DC8371C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A92A41E3-BF0F-49BD-9F0F-5FDC11BF2499\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"937C3149-3F34-40D8-964D-FB65EBDF0BC5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"90CD183A-3777-44F9-8CA6-8E802058D099\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"68C0CC63-558B-4750-8293-926BE9EAD42C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA66BCA5-3934-449E-BAD3-D0DFBF4A04BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5030281C-CD4F-4106-A100-332A4C3C2AEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D408134A-29E8-4D6A-9352-DB7F9CF55FA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B08C41E-2357-44D5-A3A7-75389B343B8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9F40588-308A-4BA7-AE62-5DCC7D7528EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E41BD65A-F39B-42C5-8776-CE09345A531D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBAFBC02-38E9-41F3-8944-6F6AB0A85941\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9069C99D-C935-4272-B7F4-172CFD246835\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"41BE2EAA-CC60-4EFA-9E75-61EDA0EB69B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71CABDC4-0E47-4E33-9075-79E0D59D9A92\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"74A5893C-A855-4C49-A17A-83B6172C0496\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F860666-578F-4B48-ABCA-1B5F2697DEAB\"}]}]}],\"references\":[{\"url\":\"http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://seclists.org/fulldisclosure/2013/Jan/120\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://seclists.org/oss-sec/2013/q1/211\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/51717\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://drupal.org/SA-CORE-2013-001\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2013/Jan/120\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/oss-sec/2013/q1/211\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/51717\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://drupal.org/SA-CORE-2013-001\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}" } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.