CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2014-1399
Severity
MEDIUM
CVSS
6.5
EPSS
1.42%
Original NVD Description
The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on referenced entities via unspecified vectors.
Related CVEs
Other vulnerabilities affecting the same vendor(s)