Drupalauth Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Drupalauth Project records in CISA KEV

No Drupalauth Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Drupalauth 1 record LOW

Records

1 record

TI-2013-03997 CVE-2013-4552 · GHSA-v7vg-hc4h-5gw6

lib/Auth/Source/External.php in the drupalauth module before 1.2.2 for simpleSAMLphp…

LOW 36

lib/Auth/Source/External.php in the drupalauth module before 1.2.2 for simpleSAMLphp allows remote attackers to authenticate as an arbitrary user via the user name (uid) in a cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01432 Published 2014-05-13 No fix listed CWE-287

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0