« Volver al listado

CVE-2013-0226

Estado: ModificadaMedia (6)—

El módulo Keyboard Shortcut Utility v7.x-1.x anterior a v7.x-1.1 para Drupal no comprueba correctamente las restricciones de nodos, lo que permite (1) a usuarios remotos autenticados con el permiso "vista de accesos directos" para leer los nodos o (2) usuarios remotos autenticados con los permisos para leer "atajos admin", editar o eliminar nodos a través de vectores no especificados.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Zugec Ivan — Keyboard Shortcut Utility

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-0226",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-03-19T14:55:02.690",
  "references": [
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/01/25/4",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://drupal.org/node/1896752",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/01/25/4",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://drupal.org/node/1896752",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows (1) remote authenticated users with the \"view shortcuts\" permission to read nodes or (2) remote authenticated users with the \"admin shortcuts\" permission to read, edit, or delete nodes via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "El módulo Keyboard Shortcut Utility v7.x-1.x anterior a v7.x-1.1 para Drupal no comprueba correctamente las restricciones de nodos, lo que permite (1) a usuarios remotos autenticados con el permiso \"vista de accesos directos\" para leer los nodos o (2) usuarios remotos autenticados con los permisos para leer \"atajos admin\", editar o eliminar nodos a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:49:00.440",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:zugec_ivan:keyboard_shortcut_utility:7.x-1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0D92572-8B48-4709-AAB9-E3801C2079E4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}