CVE-2013-2629

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-23 · updated 2026-06-16
Weakness: CWE-20

Description

Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the (1) importForm, (2) importFeed, (3) addFavorite, or (4) removeFavorite actions in action.php.

Affected products

Idleman Leed: through 1.4

References

http://seclists.org/bugtraq/2013/Dec/107
http://www.csnc.ch/misc/files/advisories/CSNC-2013-005-006-007_Leed_Multiple_vulns.txt
http://seclists.org/bugtraq/2013/Dec/107
http://www.csnc.ch/misc/files/advisories/CSNC-2013-005-006-007_Leed_Multiple_vulns.txt

Get alerted when CVE-2013-2629 or the next vulnerability affects your stack