Drupal Leaflet Module Map Features Access Bypass Vulnerability
BID:65084
Info
Drupal Leaflet Module Map Features Access Bypass Vulnerability
| Bugtraq ID: | 65084 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 22 2014 12:00AM |
| Updated: | Jan 22 2014 12:00AM |
| Credit: | Interdruper and Chris Hood |
| Vulnerable: |
Drupal Leaflet 7.x-1.0 |
| Not Vulnerable: |
Drupal Leaflet 7.x-1.1 |
Discussion
Drupal Leaflet Module Map Features Access Bypass Vulnerability
The Leaflet module for Drupal is prone to an access-bypass vulnerability.
Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions.
Leaflet 7.x-1.x prior to 7.x-1.1 are vulnerable.
The Leaflet module for Drupal is prone to an access-bypass vulnerability.
Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions.
Leaflet 7.x-1.x prior to 7.x-1.1 are vulnerable.
Exploit / POC
Drupal Leaflet Module Map Features Access Bypass Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Drupal Leaflet Module Map Features Access Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Drupal Leaflet Module Map Features Access Bypass Vulnerability
References:
References:
- Drupal Homepage (Drupal)
- Leaflet Homepage (levelos)
- SA-CONTRIB-2014-005 - Leaflet - Access bypass (Drupal)