CVE-2013-4379

CVE-2013-4379 describes an access restriction bypass vulnerability in the Make Meeting Scheduler module for Drupal versions 6.x-1.x before 6.x-1.3. This flaw allows unauthenticated remote attackers to access poll data by directly requesting the node's URL, circumventing the intended hashed URL access control. The vulnerability has a CVSS score of 6.4 (Medium), indicating it is network-exploitable with low attack complexity and requires no authentication. A successful exploit could lead to unauthorized disclosure of information (C:P) and unauthorized modification of information (I:P), but not denial of service (A:N). There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The CVE has minimal community discussion and media coverage, suggesting low public awareness and limited attacker interest.