CVE-2013-4187

MEDIUM

Flippy 7.x-1.0-7.x-1.1 - Authenticated Exposure of Sensitive Information via Node Access Bypass

Title source: llm

Description

The Flippy module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to nodes, which allows remote authenticated users with the permission to access content to read a link or alias to a restricted node.

References (5)

Core 5

Core References

Third Party Advisory x_refsource_misc

https://drupal.org/node/2054701

Third Party Advisory x_refsource_confirm

https://drupal.org/node/2050827

Mailing List, Third Party Advisory x_refsource_misc

http://www.openwall.com/lists/oss-security/2013/08/10/1

Mailing List, Third Party Advisory x_refsource_misc

http://www.openwall.com/lists/oss-security/2013/08/01/1

Mailing List, Third Party Advisory x_refsource_misc

http://www.openwall.com/lists/oss-security/2013/08/10/4

Scores

CVSS v3 6.5

EPSS 0.0145

EPSS Percentile 70.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

flippy_project/flippy 7.x-1.x dev

flippy_project/flippy 7.x-1.0 - 7.x-1.2

Published Jan 30, 2020

Tracked Since Feb 18, 2026