CVEvulnerability
CVE-2013-0245
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-07-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:N/AC:H/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x before 7.19 does not properly restrict access to node that are part of a book outline, which allows remote authenticated users with the "access printer-friendly version" permission to read node titles and possibly node content via unspecified vectors.
Affected configurations
• drupal drupal 6.0
• drupal drupal 6.1
• drupal drupal 6.2
• drupal drupal 6.3
• drupal drupal 6.4
• drupal drupal 6.5
• drupal drupal 6.6
• drupal drupal 6.7
• drupal drupal 6.8
• drupal drupal 6.9
• drupal drupal 6.10
• drupal drupal 6.11
• drupal drupal 6.12
• drupal drupal 6.13
• drupal drupal 6.14
• drupal drupal 6.15
• drupal drupal 6.16
• drupal drupal 6.17
• drupal drupal 6.18
• drupal drupal 6.19
• drupal drupal 6.20
• drupal drupal 6.21
• drupal drupal 6.22
• drupal drupal 6.23
• drupal drupal 6.24
• drupal drupal 6.25
• drupal drupal 6.26
• drupal drupal 6.27
• drupal drupal 7.0
• drupal drupal 7.1
• drupal drupal 7.2
• drupal drupal 7.3
• drupal drupal 7.4
• drupal drupal 7.5
• drupal drupal 7.6
• drupal drupal 7.7
• drupal drupal 7.8
• drupal drupal 7.9
• drupal drupal 7.10
• drupal drupal 7.11
• drupal drupal 7.12
• drupal drupal 7.13
• drupal drupal 7.14
• drupal drupal 7.15
• drupal drupal 7.16
• drupal drupal 7.17
• drupal drupal 7.18
• drupal drupal 7.x-dev
Related
Weakness · not in database (1)
References
- http://osvdb.org/89305 osvdb.org
- http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2013/Jan/120 seclists.org
- http://seclists.org/oss-sec/2013/q1/211 seclists.org
- http://secunia.com/advisories/51717 Vendor Advisory
- http://www.debian.org/security/2013/dsa-2776 www.debian.org
- https://drupal.org/SA-CORE-2013-001 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81380 exchange.xforce.ibmcloud.com
- http://osvdb.org/89305 osvdb.org
- http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2013/Jan/120 seclists.org
- http://seclists.org/oss-sec/2013/q1/211 seclists.org
- http://secunia.com/advisories/51717 Vendor Advisory
- http://www.debian.org/security/2013/dsa-2776 www.debian.org
- https://drupal.org/SA-CORE-2013-001 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81380 exchange.xforce.ibmcloud.com