Node Access User Reference Project

node_access_user_reference_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Nodeaccess Userreference Module

nodeaccess_userreference_module

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-2123 1Node Access User Reference Project 1Nodeaccess Userreference Module Apr 29, 2026 Aug 28, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 The Node access user reference module 6.x-3.x before 6.x-3.5 and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to content containing a user reference field when the author update/delete grants are...Show more The Node access user reference module 6.x-3.x before 6.x-3.5 and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to content containing a user reference field when the author update/delete grants are enabled and the author's user account is deleted, which allows remote attackers to modify the content via unspecified vectors.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2013-2123

1Node Access User Reference Project

1Nodeaccess Userreference Module

Apr 29, 2026

Aug 28, 2013

N/A· v4

N/A· v3

5.8 MEDIUM· v2

The Node access user reference module 6.x-3.x before 6.x-3.5 and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to content containing a user reference field when the author update/delete grants are enabled and the author's user account is deleted, which allows remote attackers to modify the content via unspecified vectors.Show less