CVE-2013-4230
Summary
| CVE | CVE-2013-4230 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-08-21 14:55:07 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which allows remote authenticated users with the "Who can read data submitted to this webform" permission to delete arbitrary submissions via unspecified vectors. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
SingleConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:M/Au:S/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Drupal | Drupal | - | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.19 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.22 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.23 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.24 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.25 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.26 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.27 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.29 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.30 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.31 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.32 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.33 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.34 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.35 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.36 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.37 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.38 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.41 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.42 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.43 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.44 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.48 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.53 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.56 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.57 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.59 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 6.x-6.60 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.0 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.1 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.10 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.11 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.12 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.2 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.3 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.4 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.5 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.6 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.7 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.8 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.9 | All | All | All |
| Application | Monster Menus Project | Monster Menus | 7.x-1.x | dev | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| monster_menus 6.x-6.61 | drupal.org | af854a3a-2127-422b-91ae-364da2661108 | drupal.org | Patch |
| monster_menus 7.x-1.13 | drupal.org | af854a3a-2127-422b-91ae-364da2661108 | drupal.org | Patch |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Security Advisory SA54391 - Drupal Monster Menus Module Security Bypass and Script Insertion Vulnerabilities - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| Drupal Monster Menus Module Access Bypass Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| oss-security - Re: CVE request for Drupal contributed modules | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| SA-CONTRIB-2013-066 - Monster Menus - Multiple Vulnerabilities | drupal.org | af854a3a-2127-422b-91ae-364da2661108 | drupal.org | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.