Lucene search
HistoryDec 23, 2013 - 8:55 p.m.
CVE-2013-2629
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.9%
Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the (1) importForm, (2) importFeed, (3) addFavorite, or (4) removeFavorite actions in action.php.
Affected configurations
Node
idlemanleedRange≤1.4
Related
cve
cve
CVE-2013-2629
2013-12-23 20:55:03
prion
prion
Authorization
2013-12-23 20:55:00
cvelist
cvelist
CVE-2013-2629
2013-12-23 20:00:00
packetstorm
packetstorm
Leed Authentication Bypass, SQL Injection, CSRF
2013-12-21 00:00:00
securityvulns
securityvulns
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.9%
Related for NVD:CVE-2013-2629