CVE-2013-7301

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensitive information by reading the songs in the queue.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Feb 2, 2014
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-73026.8Session fixation vulnerability in the Ubercart module 6.x-2.x before 6.x-2.13 and 7.x-3.x before 7.x-3.6 for Drupal, when the "Log in new cuCVE-2013-73034.3Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires/inscription.php and (2) prive/forms/editer_auteur.phpCVE-2013-73044.3Check Point Endpoint Security MI Server through R73 3.0.0 HFA2.5 does not configure X.509 certificate validation for client devices, which aCVE-2013-73054.3fpw.php in e107 through 1.0.4 does not check the user_ban field, which makes it easier for remote attackers to reset passwords by sending a CVE-2013-73065.4The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (CVE-2013-73075.4The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State ICVE-2013-73085.4The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link State CVE-2013-73095.4The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State AdvertiseCVE-2013-73105.4The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LCVE-2013-73115.4The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate LiCVE-2013-73125.4The OSPF implementation on Enterasys switches and routers does not consider the possibility of duplicate Link State ID values in Link State CVE-2013-73135.4The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Lin
CVE-2013-7301: Medium severity, CVSS 5.0 | Vulnix