Lucene search

[email protected]CVE-2013-4504

HistoryMay 13, 2014 - 3:55 p.m.

CVE-2013-4504

2014-05-1315:55:04

CWE-264

[email protected]

web.nvd.nist.gov

cve-2013-4504

monster menus

remote attack

node comments

url

nvd

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.2%

JSON

The Monster Menus module 7.x-1.x before 7.x-1.15 allows remote attackers to read arbitrary node comments via a crafted URL.

Affected configurations

NVD

Node

monster_menus_module_projectmonster_menusMatch7.x-1.0

monster_menus_module_projectmonster_menusMatch7.x-1.1

monster_menus_module_projectmonster_menusMatch7.x-1.2

monster_menus_module_projectmonster_menusMatch7.x-1.3

monster_menus_module_projectmonster_menusMatch7.x-1.4

monster_menus_module_projectmonster_menusMatch7.x-1.5

monster_menus_module_projectmonster_menusMatch7.x-1.6

monster_menus_module_projectmonster_menusMatch7.x-1.7

monster_menus_module_projectmonster_menusMatch7.x-1.8

monster_menus_module_projectmonster_menusMatch7.x-1.9

monster_menus_module_projectmonster_menusMatch7.x-1.10

monster_menus_module_projectmonster_menusMatch7.x-1.11

monster_menus_module_projectmonster_menusMatch7.x-1.12

monster_menus_module_projectmonster_menusMatch7.x-1.13

monster_menus_module_projectmonster_menusMatch7.x-1.14

monster_menus_module_projectmonster_menusMatch7.x-1.xdev

AND

drupaldrupalMatch-

CPENameOperatorVersion
monster_menus_module_project:monster_menusmonster menus module project monster menuseq7.x-1.0
monster_menus_module_project:monster_menusmonster menus module project monster menuseq7.x-1.1
monster_menus_module_project:monster_menusmonster menus module project monster menuseq7.x-1.2
monster_menus_module_project:monster_menusmonster menus module project monster menuseq7.x-1.3
monster_menus_module_project:monster_menusmonster menus module project monster menuseq7.x-1.4
monster_menus_module_project:monster_menusmonster menus module project monster menuseq7.x-1.5
monster_menus_module_project:monster_menusmonster menus module project monster menuseq7.x-1.6
monster_menus_module_project:monster_menusmonster menus module project monster menuseq7.x-1.7
monster_menus_module_project:monster_menusmonster menus module project monster menuseq7.x-1.8
monster_menus_module_project:monster_menusmonster menus module project monster menuseq7.x-1.9

CPE	Name	Operator	Version
monster_menus_module_project:monster_menus	monster menus module project monster menus	eq	7.x-1.0
monster_menus_module_project:monster_menus	monster menus module project monster menus	eq	7.x-1.1
monster_menus_module_project:monster_menus	monster menus module project monster menus	eq	7.x-1.2
monster_menus_module_project:monster_menus	monster menus module project monster menus	eq	7.x-1.3
monster_menus_module_project:monster_menus	monster menus module project monster menus	eq	7.x-1.4
monster_menus_module_project:monster_menus	monster menus module project monster menus	eq	7.x-1.5
monster_menus_module_project:monster_menus	monster menus module project monster menus	eq	7.x-1.6
monster_menus_module_project:monster_menus	monster menus module project monster menus	eq	7.x-1.7
monster_menus_module_project:monster_menus	monster menus module project monster menus	eq	7.x-1.8
monster_menus_module_project:monster_menus	monster menus module project monster menus	eq	7.x-1.9

Rows per page:

1-10 of 161

References

seclists.org/oss-sec/2013/q4/210

drupal.org/node/2123287

drupal.org/node/2124289

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.2%

JSON

Related for CVE-2013-4504

nvd1 prion1 drupal1 cvelist1