The Token Authentication (tokenauth) module 6.x-1.x prior to 6.x-1.7 for Drupal does not properly revert user sessions, which might allow remote malicious users to perform requests with extra privileges.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
adam_ross tokenauth 6.x-1.x |
||
adam_ross tokenauth 6.x-1.5 |
||
adam_ross tokenauth 6.x-1.6 |
||
adam_ross tokenauth 6.x-1.3 |
||
adam_ross tokenauth 6.x-1.4 |
||
adam_ross tokenauth 6.x-1.0 |
||
adam_ross tokenauth 6.x-1.1 |