CVE

Id
62188  
CVE No.
CVE-2013-2241  
Status
Candidate  
Description
modules/gallery/helpers/data_rest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information (image files) via the "full" string in the size parameter.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
622138 62188 CVE-2013-2241 MLIST:[oss-security] 20130704 Re: CVE Request -- gallery3 (3.0.9): Fixing two security flaws  View
622139 62188 CVE-2013-2241 URL:http://www.openwall.com/lists/oss-security/2013/07/04/11  View
622140 62188 CVE-2013-2241 MLIST:[oss-security] 20130705 Re: CVE Request -- gallery3 (3.0.9): Fixing two security flaws  View
622141 62188 CVE-2013-2241 URL:http://www.openwall.com/lists/oss-security/2013/07/05/3  View
622142 62188 CVE-2013-2241 MISC:http://galleryproject.org/gallery_3_0_9  View
622143 62188 CVE-2013-2241 CONFIRM:http://sourceforge.net/apps/trac/gallery/ticket/2074  View
622144 62188 CVE-2013-2241 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=981198  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21957 JVNDB-2013-003532 Moodle の mod/feedback/lib.php における重要な情報を取得される脆弱性 Moodle の mod/feedback/lib.php は、直近のフィードバックを表示する前に mod/feedback:view のケイパビリティ (capability) を考慮しないため、重要な情報を取得される脆弱性が存在します。 CVE-2013-2246 62188 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003532.html  View