CVE-2013-2122

MEDIUM 5.0CVE-2013-2122 · Published 16/07/2013 · updated 16/06/2026

In short

CVE-2013-2122 is a MEDIUM (CVSS 5.0) vulnerability affecting edit limit (quade).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
edit limit quade	`= 7.x-1.0= 7.x-1.1= 7.x-1.2= 7.x-1.x`	No fix yet

Description

The Edit Limit module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to comments, which allows remote authenticated users with the "edit comments" permission to edit arbitrary comments of other users via unspecified vectors.

References

osvdb.org/93725
seclists.org/fulldisclosure/2013/May/208
secunia.com/advisories/53556 · Vendor Advisory
openwall.com/lists/oss-security/2013/05/29/9
securityfocus.com/bid/60209
drupal.org/node/2006188 · Vendor Advisory
drupal.org/node/2007048 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/84630

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free