CVE-2013-2247

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-08-28 · updated 2026-06-16
Weakness: CWE-264

Description

The Fast Permissions Administration module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.3 for Drupal does not properly restrict access to the modal content callback, which allows remote attackers to obtain unspecified access to the permissions edit form.

Affected products

Fast Permissions Administration Project Fast Permission Administration: 6.x-2.0, 6.x-2.1, 6.x-2.2, 6.x-2.3, 6.x-2.4, 6.x-2.x-dev (+4)

References

http://www.openwall.com/lists/oss-security/2013/07/06/3
https://drupal.org/node/2028417
https://drupal.org/node/2028421
https://drupal.org/node/2028813
http://www.openwall.com/lists/oss-security/2013/07/06/3
https://drupal.org/node/2028417
https://drupal.org/node/2028421
https://drupal.org/node/2028813

Get alerted when CVE-2013-2247 or the next vulnerability affects your stack