Lucene search
HistoryDec 23, 2013 - 8:55 p.m.
CVE-2013-2629
leed
light feed
cve-2013-2629
authorization bypass
action.php
security vulnerability
nvd
6.9 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.5%
Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the (1) importForm, (2) importFeed, (3) addFavorite, or (4) removeFavorite actions in action.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| idleman:leed | idleman leed | le | 1.4 |
Related
prion
prion
Authorization
2013-12-23 20:55:00
packetstorm
packetstorm
Leed Authentication Bypass, SQL Injection, CSRF
2013-12-21 00:00:00
securityvulns
securityvulns
6.9 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.5%
Related for CVE-2013-2629