CVE-2013-1973

MediumCVSS 4.0/10Last modified Jun 16, 2026

Description

The autocomplete callback in Autocomplete Widgets for Text and Number Fields (autocomplete_widgets) module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-rc1 does not properly handle node permissions, which allows remote authenticated users to obtain sensitive field values via unspecified vectors.

Metrics

CVSS 2.0 4.0/10AV:N/AC:L/Au:S/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/92532
http://secunia.com/advisories/52996
https://drupal.org/node/1971848Patch
https://drupal.org/node/1971856Patch
https://drupal.org/node/1972976Patch, Vendor Advisory
http://osvdb.org/92532
http://secunia.com/advisories/52996
https://drupal.org/node/1971848Patch
https://drupal.org/node/1971856Patch
https://drupal.org/node/1972976Patch, Vendor Advisory

Timeline

Published: Jun 9, 2014
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-19766.9The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 CVE-2013-19772.1OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the L CVE-2013-19786.8Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows r CVE-2013-19796.9The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passin CVE-2013-19806.8Buffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows remote attackers to execute arbitrary code via CVE-2013-19816.8Multiple integer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to trigger allocation of insufficient memory and CVE-2013-19826.8Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer over CVE-2013-19836.8Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via CVE-2013-19846.8Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overfl CVE-2013-19856.8Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow CVE-2013-19866.8Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer ov CVE-2013-19876.8Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer o