Lucene search
HistoryJul 16, 2013 - 6:55 p.m.
CVE-2013-2122
drupal
edit limit module
cve-2013-2122
security
vulnerability
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.0%
The Edit Limit module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to comments, which allows remote authenticated users with the “edit comments” permission to edit arbitrary comments of other users via unspecified vectors.
Affected configurations
Node
quadeedit_limitMatch7.x-1.0
ORquadeedit_limitMatch7.x-1.0beta1
ORquadeedit_limitMatch7.x-1.0beta2
ORquadeedit_limitMatch7.x-1.0beta3
ORquadeedit_limitMatch7.x-1.0beta4
ORquadeedit_limitMatch7.x-1.1
ORquadeedit_limitMatch7.x-1.2
ORquadeedit_limitMatch7.x-1.xdev
drupaldrupalMatch-
Related
nvd
nvd
CVE-2013-2122
2013-07-16 18:55:01
cvelist
cvelist
CVE-2013-2122
2013-07-16 18:00:00
drupal
drupal
SA-CONTRIB-2013-048 - Edit Limit - Access Bypass
2013-05-29 00:00:00
prion
prion
Design/Logic Flaw
2013-07-16 18:55:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.0%
Related for CVE-2013-2122