CVEvulnerability
CVE-2013-2122
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-07-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The Edit Limit module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to comments, which allows remote authenticated users with the "edit comments" permission to edit arbitrary comments of other users via unspecified vectors.
Affected configurations
• quade edit limit 7.x-1.0
• quade edit limit 7.x-1.1
• quade edit limit 7.x-1.2
• quade edit limit 7.x-1.x
Related
Weakness · not in database (1)
References
- http://osvdb.org/93725 osvdb.org
- http://seclists.org/fulldisclosure/2013/May/208 seclists.org
- http://secunia.com/advisories/53556 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/05/29/9 www.openwall.com
- http://www.securityfocus.com/bid/60209 www.securityfocus.com
- https://drupal.org/node/2006188 Vendor Advisory
- https://drupal.org/node/2007048 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84630 exchange.xforce.ibmcloud.com
- http://osvdb.org/93725 osvdb.org
- http://seclists.org/fulldisclosure/2013/May/208 seclists.org
- http://secunia.com/advisories/53556 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/05/29/9 www.openwall.com
- http://www.securityfocus.com/bid/60209 www.securityfocus.com
- https://drupal.org/node/2006188 Vendor Advisory
- https://drupal.org/node/2007048 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84630 exchange.xforce.ibmcloud.com