Read the docs

Security Questions Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Security Questions Project records in CISA KEV

No Security Questions Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Security Questions · all components

Priority LOW 26

The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does not properly restrict access, which allows remote attackers to edit an arbitrary user's questions and answers via unspecifie…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01332 Published 2012-11-30 No fix listed CWE-264
Open these records in search →