Read the docs

Persistent Login Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Persistent Login Project records in CISA KEV

No Persistent Login Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority MEDIUM 49

Insufficient Session Expiration vulnerability in Drupal Persistent Login allows Forceful Browsing.This issue affects Persistent Login: from 0.0.0 before 1.8.0, from 2.0.* before 2.2.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00421 Published 2025-01-09 Fixed in 1.8.0, 2.2.2 CWE-613
Open these records in search →