CVE-2013-4379

The Make Meeting Scheduler module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to bypass intended access restrictions for a poll via a direct request to the node's URL instead of the hashed URL.

Score

CVSS 2.0 6.4 Medium

Status

Modified - secalert@redhat.com

Published

2013-10-09

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Make Meeting Scheduler Module (Sebastien Corbin)

References

• http://secunia.com/advisories/54634
• http://www.openwall.com/lists/oss-security/2013/09/27/6
• https://drupal.org/node/2081637
• https://drupal.org/node/2081647