CVE-2013-4187: The Flippy module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to nodes, which allow...

Security readout for executives and security teams

CVE-2013-4187 is an access-control flaw in the Drupal 7 Flippy module. On affected versions, logged-in users who can access content may see a link or alias to a restricted node. This can expose the existence or location of content that should remain hidden. Exposure is limited to Drupal 7 sites using Flippy 7.x-1.x before 7.x-1.2, especially sites with restricted nodes and broad authenticated-user content permissions. Prioritize remediation for Drupal sites containing sensitive restricted content or large authenticated user populations. For small trusted-user sites, handle through normal patch governance. Mitigation focus: Upgrade Flippy 7.x-1.x to 7.x-1.2 or later.; Review Drupal advisory guidance for any module-specific instructions.; Restrict content-access permissions to roles with a business need..

Prepared

Jun 6, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.