AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-2123

MEDIUM · CVSS 5.8 EPSS 1.31%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-08-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2013-2123
Severity
MEDIUM
CVSS
5.8
EPSS
1.31%

Original NVD Description

The Node access user reference module 6.x-3.x before 6.x-3.5 and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to content containing a user reference field when the author update/delete grants are enabled and the author's user account is deleted, which allows remote attackers to modify the content via unspecified vectors.