CVE-2013-4609: Medium severity Project-redcap Redcap vulnerability
REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows remote authenticated users to bypass intended access restrictions via (1) the Online Designer or (2) the Data Dictionary upload, as demonstrated by an eval call.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4609?
CVE-2013-4609 has been rated as a medium severity vulnerability.
How do I fix CVE-2013-4609?
To fix CVE-2013-4609, upgrade REDCap to version 5.0.4 or 5.1.3 or later.
What types of users are affected by CVE-2013-4609?
Remote authenticated users are affected by CVE-2013-4609 as they can exploit the vulnerability to bypass access restrictions.
What versions of REDCap are vulnerable to CVE-2013-4609?
REDCap versions before 5.0.4 and 5.1.x versions before 5.1.3 are vulnerable to CVE-2013-4609.
How does CVE-2013-4609 impact the functionality of REDCap?
CVE-2013-4609 allows users to improperly execute undocumented syntax in branching logic and calculations, compromising data security.