CVE-2013-2629 in Leed
Summary
Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the (1) importForm, (2) importFeed, (3) addFavorite, or (4) removeFavorite actions in action.php.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
03/19/2013
Disclosure
12/23/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65868 | Idleman Leed Authorization action.php input validation | 20 | Not defined | Official fix | CVE-2013-2629 |