Vulnerability Bulletins |
Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2015-001 |
|
| Affected software | Drupal |
|
Advisory ID: DRUPAL-SA-CORE-2015-001Project: Drupal core Version: 6.x, 7.xDate: 2015-March-18 Security risk: 14/25 ( Moderately Critical) AC:Complex/A:None/CI:Some/II:Some/E:Theoretical/TD:DefaultVulnerability: Access bypass, Open Redirect, Multiple vulnerabilitiesDescriptionAccess bypass (Password reset URLs - Drupal 6 and 7)Password reset URLs can be forged under certain circumstances, allowing an attacker to gain access to another users account without knowing the accounts password.In Drupal More info: https://www.drupal.org/SA-CORE-2015-001 |
|