CVE-2013-0245

Description

The printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x before 7.19 does not properly restrict access to node that are part of a book outline, which allows remote authenticated users with the access printer-friendly version permission to read node titles and possibly node content via unspecified vectors.

Risk Information

Base Score

4.3

MODERATE

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.412

Associated Vulnerability

Vulnerability	OS Platform
Update drupal 7.x-dev to latest version	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234