Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2013-1908
Modified
More InfoOfficial Page
Source-secalert@redhat.com
View Known Exploited Vulnerability (KEV) details
Published At-16 Jul, 2013 | 18:55
Updated At-29 Apr, 2026 | 01:13

The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspecified vectors.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.05.0MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
Type: Primary
Version: 2.0
Base score: 5.0
Base severity: MEDIUM
Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N
CPE Matches
acquia
acquia
>>commons>>Versions up to 7.x-3.0(inclusive)
cpe:2.3:a:acquia:commons:*:*:*:*:*:*:*:*
acquia
acquia
>>commons>>7.x-3.x
cpe:2.3:a:acquia:commons:7.x-3.x:dev:*:*:*:*:*:*
commons_wikis_project
commons_wikis_project
>>commons_wikis>>Versions up to 7.x-3.0(inclusive)
cpe:2.3:a:commons_wikis_project:commons_wikis:*:*:*:*:*:*:*:*
commons_wikis_project
commons_wikis_project
>>commons_wikis>>7.x-3.x
cpe:2.3:a:commons_wikis_project:commons_wikis:7.x-3.x:dev:*:*:*:*:*:*
The Drupal Association
drupal
>>drupal>>-
cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-264Primarynvd@nist.gov
CWE ID: CWE-264
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://osvdb.org/91747secalert@redhat.com
N/A
http://packetstormsecurity.com/files/120995/Drupal-Common-Wikis-7.x-Access-Bypass-Privilege-Escalation.htmlsecalert@redhat.com
N/A
http://seclists.org/fulldisclosure/2013/Mar/244secalert@redhat.com
N/A
http://secunia.com/advisories/52766secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/52795secalert@redhat.com
Vendor Advisory
https://drupal.org/node/1954766secalert@redhat.com
Patch
Vendor Advisory
https://drupal.org/node/1954768secalert@redhat.com
Patch
https://drupal.org/node/1954948secalert@redhat.com
Patch
http://osvdb.org/91747af854a3a-2127-422b-91ae-364da2661108
N/A
http://packetstormsecurity.com/files/120995/Drupal-Common-Wikis-7.x-Access-Bypass-Privilege-Escalation.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://seclists.org/fulldisclosure/2013/Mar/244af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/52766af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/52795af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
https://drupal.org/node/1954766af854a3a-2127-422b-91ae-364da2661108
Patch
Vendor Advisory
https://drupal.org/node/1954768af854a3a-2127-422b-91ae-364da2661108
Patch
https://drupal.org/node/1954948af854a3a-2127-422b-91ae-364da2661108
Patch
Hyperlink: http://osvdb.org/91747
Source: secalert@redhat.com
Resource: N/A
Hyperlink: http://packetstormsecurity.com/files/120995/Drupal-Common-Wikis-7.x-Access-Bypass-Privilege-Escalation.html
Source: secalert@redhat.com
Resource: N/A
Hyperlink: http://seclists.org/fulldisclosure/2013/Mar/244
Source: secalert@redhat.com
Resource: N/A
Hyperlink: http://secunia.com/advisories/52766
Source: secalert@redhat.com
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/52795
Source: secalert@redhat.com
Resource:
Vendor Advisory
Hyperlink: https://drupal.org/node/1954766
Source: secalert@redhat.com
Resource:
Patch
Vendor Advisory
Hyperlink: https://drupal.org/node/1954768
Source: secalert@redhat.com
Resource:
Patch
Hyperlink: https://drupal.org/node/1954948
Source: secalert@redhat.com
Resource:
Patch
Hyperlink: http://osvdb.org/91747
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://packetstormsecurity.com/files/120995/Drupal-Common-Wikis-7.x-Access-Bypass-Privilege-Escalation.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://seclists.org/fulldisclosure/2013/Mar/244
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://secunia.com/advisories/52766
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/52795
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: https://drupal.org/node/1954766
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Vendor Advisory
Hyperlink: https://drupal.org/node/1954768
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://drupal.org/node/1954948
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Change History
0Changes found
Details not found