Read the docs

Browserid Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Browserid Project records in CISA KEV

No Browserid Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Browserid 2 records MEDIUM

Records

2 records

TI-2012-02346 CVE-2012-2714 · GHSA-w956-4fqq-pmv6

Improper authentication in BrowserID

Priority MEDIUM 48

The BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users via the audience identifier.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03294 Published 2020-01-09 Fixed in 7.x-1.3 CWE-287
TI-2012-02345 CVE-2012-2713 · GHSA-5vwg-c233-4qjm

Cross-site request forgery (CSRF) vulnerability in the BrowserID (Mozilla Persona) module…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in the BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that login…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01198 Published 2012-06-27 No fix listed CWE-352
Open these records in search →