Unscored CVE-2013-7063 EUVD-2013-6859GHSA-wrj4-7985-3hqv

The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information…

Published Apr 29, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views.

References

https://drupal.org/node/2140097
[oss-security] 20131211 Re: CVE request for Drupal core, and contributed modules mailing-list
[oss-security] 20131206 CVE request for Drupal core, and contributed modules mailing-list