Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hqq6-wqq7-jgjq

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the same password hash as another account and a crafted password reset URL.

Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the same password hash as another account and a crafted password reset URL.

EPSS

Процентиль: 63%
0.00452
Низкий

Дефекты

CWE-284

Связанные уязвимости

ubuntu
около 10 лет назад

Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the same password hash as another account and a crafted password reset URL.

nvd
около 10 лет назад

Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the same password hash as another account and a crafted password reset URL.

debian
около 10 лет назад

Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated ...

EPSS

Процентиль: 63%
0.00452
Низкий

Дефекты

CWE-284