VULNERABILITY INTELLIGENCE

CVE-2013-4379

CVSS score6.4 MEDIUM
EPSS probability1.36%
CISA KEVNot currently listed
Published2013-10-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

The Make Meeting Scheduler module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to bypass intended access restrictions for a poll via a direct request to the node's URL instead of the hashed URL.

Primary references