CVE-2013-4230 - CVE House
Back to Database
Status published Medium CVE-2013-4230

The mm_webform submodule in the Monster Menus module 6.x-6.x before...

Vulnerability Description

The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which allows remote authenticated users with the "Who can read data submitted to this webform" permission to delete arbitrary submissions via unspecified vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4230

Credits & Attribution

No credits recorded in the NVD database.

References

More from monster menus project

View All →
CVE-2015-8095
The recycle bin feature in the Monster Menus module 7.x-1.21...
Medium 5
CVE-2013-4504
The Monster Menus module 7.x-1.x before 7.x-1.15 allows remote attackers...
Low 2.6
CVE-2013-4229
Cross-site scripting (XSS) vulnerability in the Monster Menus module 7.x-1.x...
Low 2.1

Affected Vendor

monster menus project

View all reports →

Affected Software

monster menus
Vulnerable Versions:
6.x-6.19, 6.x-6.22, 6.x-6.23, 6.x-6.24, 6.x-6.25, 6.x-6.26, 6.x-6.27, 6.x-6.29, 6.x-6.30, 6.x-6.31, 6.x-6.32, 6.x-6.33, 6.x-6.34, 6.x-6.35, 6.x-6.36, 6.x-6.37, 6.x-6.38, 6.x-6.41, 6.x-6.42, 6.x-6.43, 6.x-6.44, 6.x-6.48, 6.x-6.53, 6.x-6.56, 6.x-6.57, 6.x-6.59, 6.x-6.60, 7.x-1.0, 7.x-1.1, 7.x-1.2, 7.x-1.3, 7.x-1.4, 7.x-1.5, 7.x-1.6, 7.x-1.7, 7.x-1.8, 7.x-1.9, 7.x-1.10, 7.x-1.11, 7.x-1.12, 7.x-1.x

Timeline

Official Publish: August 21st, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.