CVEvulnerability
CVE-2013-4230
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which allows remote authenticated users with the "Who can read data submitted to this webform" permission to delete arbitrary submissions via unspecified vectors.
Affected configurations
• monster menus project monster menus 6.x-6.19
• monster menus project monster menus 6.x-6.22
• monster menus project monster menus 6.x-6.23
• monster menus project monster menus 6.x-6.24
• monster menus project monster menus 6.x-6.25
• monster menus project monster menus 6.x-6.26
• monster menus project monster menus 6.x-6.27
• monster menus project monster menus 6.x-6.29
• monster menus project monster menus 6.x-6.30
• monster menus project monster menus 6.x-6.31
• monster menus project monster menus 6.x-6.32
• monster menus project monster menus 6.x-6.33
• monster menus project monster menus 6.x-6.34
• monster menus project monster menus 6.x-6.35
• monster menus project monster menus 6.x-6.36
• monster menus project monster menus 6.x-6.37
• monster menus project monster menus 6.x-6.38
• monster menus project monster menus 6.x-6.41
• monster menus project monster menus 6.x-6.42
• monster menus project monster menus 6.x-6.43
• monster menus project monster menus 6.x-6.44
• monster menus project monster menus 6.x-6.48
• monster menus project monster menus 6.x-6.53
• monster menus project monster menus 6.x-6.56
• monster menus project monster menus 6.x-6.57
• monster menus project monster menus 6.x-6.59
• monster menus project monster menus 6.x-6.60
• monster menus project monster menus 7.x-1.0
• monster menus project monster menus 7.x-1.1
• monster menus project monster menus 7.x-1.2
• monster menus project monster menus 7.x-1.3
• monster menus project monster menus 7.x-1.4
• monster menus project monster menus 7.x-1.5
• monster menus project monster menus 7.x-1.6
• monster menus project monster menus 7.x-1.7
• monster menus project monster menus 7.x-1.8
• monster menus project monster menus 7.x-1.9
• monster menus project monster menus 7.x-1.10
• monster menus project monster menus 7.x-1.11
• monster menus project monster menus 7.x-1.12
• monster menus project monster menus 7.x-1.x
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/54391 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/08/10/1 www.openwall.com
- http://www.securityfocus.com/bid/61711 www.securityfocus.com
- https://drupal.org/node/2059805 Patch
- https://drupal.org/node/2059807 Patch
- https://drupal.org/node/2059823 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86326 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/54391 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/08/10/1 www.openwall.com
- http://www.securityfocus.com/bid/61711 www.securityfocus.com
- https://drupal.org/node/2059805 Patch
- https://drupal.org/node/2059807 Patch
- https://drupal.org/node/2059823 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86326 exchange.xforce.ibmcloud.com