Unscored CVE-2013-0182 EUVD-2013-0220GHSA-m4xq-j92p-g2p4

The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read a…

Published Mar 27, 2013 · Updated Sep 16, 2024 · Assigned by redhat

Description

The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments.

References

https://drupal.org/node/1884360
[oss-security] 20130114 Re: CVE request for Drupal contributed modules mailing-list
http://drupal.org/node/1883830
http://drupal.org/node/1871508
http://drupalcode.org/project/payment.git/commitdiff/62c9186