{"id":"CVE-2013-0226","url":"https://www.cyber-defence.io/tools/cve/CVE-2013-0226","generatedAt":"2026-10-27T19:57:43.680Z","title":"The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows (1) remote authenticated users with the \"view shortcuts\" permission to read nodes or (2) remote authenticated users with the…","description":"The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows (1) remote authenticated users with the \"view shortcuts\" permission to read nodes or (2) remote authenticated users with the \"admin shortcuts\" permission to read, edit, or delete nodes via unspecified vectors.","published":"2013-03-19T14:55:03.000Z","lastModified":"2026-06-16T23:49:00.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"2.0","score":6,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P"},"cwe":["CWE-264"],"affected":["zugec ivan/keyboard shortcut utility"],"epss":{"score":0.00945,"percentile":0.60832,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.95%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2013/01/25/4","source":"secalert@redhat.com"},{"url":"https://drupal.org/node/1896752","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2013/01/25/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://drupal.org/node/1896752","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-0226","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}