CVE-2013-4230: Medium severity drupal monster menus vulnerability
Published Aug 21, 2013
·Updated
The mmwebform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which allows remote authenticated users with the "Who can read data submitted to this webform" permission to delete arbitrary submissions via unspecified vectors.
Affected Software
84 affected components
Monster Menus Module Project Monster Menus=6.x-6.19
Monster Menus Module Project Monster Menus=6.x-6.22
Monster Menus Module Project Monster Menus=6.x-6.23
Monster Menus Module Project Monster Menus=6.x-6.24
Monster Menus Module Project Monster Menus=6.x-6.25
Monster Menus Module Project Monster Menus=6.x-6.26
Monster Menus Module Project Monster Menus=6.x-6.27
Monster Menus Module Project Monster Menus=6.x-6.29
Monster Menus Module Project Monster Menus=6.x-6.30
Monster Menus Module Project Monster Menus=6.x-6.31
Monster Menus Module Project Monster Menus=6.x-6.32
Monster Menus Module Project Monster Menus=6.x-6.33
Monster Menus Module Project Monster Menus=6.x-6.34
Monster Menus Module Project Monster Menus=6.x-6.35
Monster Menus Module Project Monster Menus=6.x-6.36
Monster Menus Module Project Monster Menus=6.x-6.37
Monster Menus Module Project Monster Menus=6.x-6.38
Monster Menus Module Project Monster Menus=6.x-6.41
Monster Menus Module Project Monster Menus=6.x-6.42
Monster Menus Module Project Monster Menus=6.x-6.43
Monster Menus Module Project Monster Menus=6.x-6.44
Monster Menus Module Project Monster Menus=6.x-6.48
Monster Menus Module Project Monster Menus=6.x-6.53
Monster Menus Module Project Monster Menus=6.x-6.56
Monster Menus Module Project Monster Menus=6.x-6.57
Monster Menus Module Project Monster Menus=6.x-6.59
Monster Menus Module Project Monster Menus=6.x-6.60
Monster Menus Module Project Monster Menus=7.x-1.0
Monster Menus Module Project Monster Menus=7.x-1.1
Monster Menus Module Project Monster Menus=7.x-1.2
Monster Menus Module Project Monster Menus=7.x-1.3
Monster Menus Module Project Monster Menus=7.x-1.4
Monster Menus Module Project Monster Menus=7.x-1.5
Monster Menus Module Project Monster Menus=7.x-1.6
Monster Menus Module Project Monster Menus=7.x-1.7
Monster Menus Module Project Monster Menus=7.x-1.8
Monster Menus Module Project Monster Menus=7.x-1.9
Monster Menus Module Project Monster Menus=7.x-1.10
Monster Menus Module Project Monster Menus=7.x-1.11
Monster Menus Module Project Monster Menus=7.x-1.12
Monster Menus Module Project Monster Menus=7.x-1.x-dev
Drupal Drupal
All of the following
Any of the following
Monster Menus Project Monster Menus=6.x-6.19
Monster Menus Project Monster Menus=6.x-6.22
Monster Menus Project Monster Menus=6.x-6.23
Monster Menus Project Monster Menus=6.x-6.24
Monster Menus Project Monster Menus=6.x-6.25
Monster Menus Project Monster Menus=6.x-6.26
Monster Menus Project Monster Menus=6.x-6.27
Monster Menus Project Monster Menus=6.x-6.29
Monster Menus Project Monster Menus=6.x-6.30
Monster Menus Project Monster Menus=6.x-6.31
Monster Menus Project Monster Menus=6.x-6.32
Monster Menus Project Monster Menus=6.x-6.33
Monster Menus Project Monster Menus=6.x-6.34
Monster Menus Project Monster Menus=6.x-6.35
Monster Menus Project Monster Menus=6.x-6.36
Monster Menus Project Monster Menus=6.x-6.37
Monster Menus Project Monster Menus=6.x-6.38
Monster Menus Project Monster Menus=6.x-6.41
Monster Menus Project Monster Menus=6.x-6.42
Monster Menus Project Monster Menus=6.x-6.43
Monster Menus Project Monster Menus=6.x-6.44
Monster Menus Project Monster Menus=6.x-6.48
Monster Menus Project Monster Menus=6.x-6.53
Monster Menus Project Monster Menus=6.x-6.56
Monster Menus Project Monster Menus=6.x-6.57
Monster Menus Project Monster Menus=6.x-6.59
Monster Menus Project Monster Menus=6.x-6.60
Monster Menus Project Monster Menus=7.x-1.0
Monster Menus Project Monster Menus=7.x-1.1
Monster Menus Project Monster Menus=7.x-1.2
Monster Menus Project Monster Menus=7.x-1.3
Monster Menus Project Monster Menus=7.x-1.4
Monster Menus Project Monster Menus=7.x-1.5
Monster Menus Project Monster Menus=7.x-1.6
Monster Menus Project Monster Menus=7.x-1.7
Monster Menus Project Monster Menus=7.x-1.8
Monster Menus Project Monster Menus=7.x-1.9
Monster Menus Project Monster Menus=7.x-1.10
Monster Menus Project Monster Menus=7.x-1.11
Monster Menus Project Monster Menus=7.x-1.12
Monster Menus Project Monster Menus=7.x-1.x-dev
Drupal Drupal
Remediation
Patch Available
Patch Available
Event History
Aug 21, 2013
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-4230?
CVE-2013-4230 is considered a high severity vulnerability due to improper access control, allowing remote authenticated users to delete webform submissions.
2
How do I fix CVE-2013-4230?
To fix CVE-2013-4230, upgrade the Monster Menus module to version 6.x-6.61 or later for Drupal 6, or 7.x-1.13 or later for Drupal 7.
3
Who is affected by CVE-2013-4230?
CVE-2013-4230 affects users of the Monster Menus module versions prior to 6.x-6.61 and 7.x-1.13 in Drupal.
4
What kind of access does CVE-2013-4230 grant to attackers?
CVE-2013-4230 allows authenticated remote users with the appropriate permissions to delete arbitrary webform submissions.
5
When was CVE-2013-4230 reported?
CVE-2013-4230 was reported in August 2013.