CVE-2013-4445: Medium severity steven jones context vulnerability
The json rendering functionality in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before 7.x-3.0 for Drupal uses Drupal's token scheme to restrict access to blocks, which makes it easier for remote authenticated users to guess the access token for a block by leveraging the token from a block to which the user has access.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4445?
CVE-2013-4445 is classified as a moderate-severity vulnerability due to its impact on access control.
How do I fix CVE-2013-4445?
To fix CVE-2013-4445, update the Context module to version 6.x-3.2 or later for Drupal 6, or to version 7.x-3.0 or later for Drupal 7.
Who is affected by CVE-2013-4445?
CVE-2013-4445 affects versions of the Context module prior to 6.x-3.2 and 7.x-3.0, allowing authenticated users to potentially guess access tokens.
What is CVE-2013-4445?
CVE-2013-4445 is a vulnerability in the Context module for Drupal that allows remote authenticated users to guess access tokens for blocks.
Is there a workaround for CVE-2013-4445?
There are no known workarounds for CVE-2013-4445; upgrading to the patched versions is the recommended solution.