The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which allows remote authenticated users with the "Who can read data submitted to this webform" permission to delete arbitrary submissions via unspecified vectors.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
27 Aug 2025, 15:51
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Monster Menus Project
Monster Menus Project monster Menus |
|
| CPE | cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.57:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.23:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.30:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.8:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.24:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.60:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.48:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.11:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.19:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.25:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.36:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.5:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.33:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.37:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.41:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.7:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.44:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.53:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.59:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.2:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.34:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.35:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.1:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.27:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.x:dev:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.31:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.3:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.9:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.6:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.42:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.4:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.12:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.32:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.29:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.43:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.0:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.38:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:7.x-1.10:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.56:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_module_project:monster_menus:6.x-6.22:*:*:*:*:*:*:* |
cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.59:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.30:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.32:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.2:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.25:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.x:dev:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.23:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.29:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.6:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.24:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.11:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.53:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.42:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.1:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.9:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.56:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.19:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.38:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.43:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.48:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.8:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.41:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.4:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.44:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.27:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.7:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.33:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.34:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.31:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.60:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.26:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.35:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.3:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.12:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.36:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.0:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.37:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.5:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.57:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:6.x-6.22:*:*:*:*:*:*:* cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.10:*:*:*:*:*:*:* |
21 Nov 2024, 01:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://secunia.com/advisories/54391 - Vendor Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2013/08/10/1 - | |
| References | () http://www.securityfocus.com/bid/61711 - | |
| References | () https://drupal.org/node/2059805 - Patch | |
| References | () https://drupal.org/node/2059807 - Patch | |
| References | () https://drupal.org/node/2059823 - Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/86326 - |
Information
Published : 2013-08-21 14:55
Updated : 2025-08-27 15:51
NVD link : CVE-2013-4230
Mitre link : CVE-2013-4230
CVE.ORG link : CVE-2013-4230
JSON object : View
Products Affected
drupal
- drupal
monster_menus_project
- monster_menus
CWE
CWE-264
Permissions, Privileges, and Access Controls