5

CVE-2013-2122

The Edit Limit module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to comments, which allows remote authenticated users with the "edit comments" permission to edit arbitrary comments of other users via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Quade ≫ Edit Limit Version 7.x-1.0
   Drupal ≫ Drupal Version -
Quade ≫ Edit Limit Version 7.x-1.0 Update beta1
   Drupal ≫ Drupal Version -
Quade ≫ Edit Limit Version 7.x-1.0 Update beta2
   Drupal ≫ Drupal Version -
Quade ≫ Edit Limit Version 7.x-1.0 Update beta3
   Drupal ≫ Drupal Version -
Quade ≫ Edit Limit Version 7.x-1.0 Update beta4
   Drupal ≫ Drupal Version -
Quade ≫ Edit Limit Version 7.x-1.1
   Drupal ≫ Drupal Version -
Quade ≫ Edit Limit Version 7.x-1.2
   Drupal ≫ Drupal Version -
Quade ≫ Edit Limit Version 7.x-1.x Update dev
   Drupal ≫ Drupal Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.56% 0.719
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://osvdb.org/93725
http://seclists.org/fulldisclosure/2013/May/208
http://secunia.com/advisories/53556
Vendor Advisory
http://www.openwall.com/lists/oss-security/2013/05/29/9
http://www.securityfocus.com/bid/60209
https://drupal.org/node/2006188
Vendor Advisory
https://drupal.org/node/2007048
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/84630