CVE-2013-2122

medium

Description

The Edit Limit module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to comments, which allows remote authenticated users with the "edit comments" permission to edit arbitrary comments of other users via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/84630

https://drupal.org/node/2007048

https://drupal.org/node/2006188

http://www.securityfocus.com/bid/60209

http://www.openwall.com/lists/oss-security/2013/05/29/9

http://secunia.com/advisories/53556

http://seclists.org/fulldisclosure/2013/May/208

http://osvdb.org/93725

Details

Source: Mitre, NVD

Published: 2013-07-16

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N