Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-4230

The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which allows remote authenticated users with the "Who can read data submitted to this webform" permission to delete arbitrary submissions via unspecified vectors.

Published

2013-08-21T14:55:07.150

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: SINGLE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

6.8

Impact Score

6.4

Weaknesses

Type: Primary
CWE-264

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	monster_menus_module_project	monster_menus	6.x-6.19	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.22	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.23	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.24	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.25	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.26	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.27	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.29	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.30	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.31	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.32	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.33	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.34	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.35	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.36	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.37	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.38	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.41	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.42	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.43	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.44	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.48	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.53	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.56	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.57	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.59	Yes
Application	monster_menus_module_project	monster_menus	6.x-6.60	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.0	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.1	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.2	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.3	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.4	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.5	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.6	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.7	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.8	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.9	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.10	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.11	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.12	Yes
Application	monster_menus_module_project	monster_menus	7.x-1.x	Yes
Application	drupal	drupal	-	No

References

http://secunia.com/advisories/54391 Vendor Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2013/08/10/1 ([email protected])
http://www.securityfocus.com/bid/61711 ([email protected])
https://drupal.org/node/2059805 Patch ([email protected])
https://drupal.org/node/2059807 Patch ([email protected])
https://drupal.org/node/2059823 Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/86326 ([email protected])
http://secunia.com/advisories/54391 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2013/08/10/1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/61711 (af854a3a-2127-422b-91ae-364da2661108)
https://drupal.org/node/2059805 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://drupal.org/node/2059807 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://drupal.org/node/2059823 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/86326 (af854a3a-2127-422b-91ae-364da2661108)