CVE-2013-4226

6.5 mediumEPSS 1.6%

The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to cached pages, which allows remote attackers with the same role-combination as the superuser to obtain sensitive information via the cached pages of the superuser.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2020-02-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

drupal:authenticated_user_page_caching

References

http://www.openwall.com/lists/oss-security/2013/08/10/1
https://drupal.org/node/2058165
https://drupal.org/node/2059589
http://www.openwall.com/lists/oss-security/2013/08/10/1
https://drupal.org/node/2058165

Check your stack JSON