Design/Logic Flaw

2013-07-1618:55:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.0%

JSON

The Edit Limit module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to comments, which allows remote authenticated users with the “edit comments” permission to edit arbitrary comments of other users via unspecified vectors.

CPENameOperatorVersion
edit_limiteq7.x-1.0 beta1
edit_limiteq7.x-1.0 beta2
edit_limiteq7.x-1.0 beta3
edit_limiteq7.x-1.0 beta4
edit_limiteq7.120.10
edit_limiteq7.120.11
edit_limiteq7.120.12
edit_limiteq7.x-1.x dev

Name	Operator	Version
edit_limit	eq	7.x-1.0 beta1
edit_limit	eq	7.x-1.0 beta2
edit_limit	eq	7.x-1.0 beta3
edit_limit	eq	7.x-1.0 beta4
edit_limit	eq	7.120.10
edit_limit	eq	7.120.11
edit_limit	eq	7.120.12
edit_limit	eq	7.x-1.x dev