Improper input validation in Idleman Leed

CVE-2013-2629

Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the (1) importForm, (2) importFeed, (3) addFavorite, or (4) removeFavorite actions in action.php.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.

Affected products

Idleman Leed
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_MISC)