Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Token Authentication (tokenauth) module 6.x-1.x before 6.x-1.7 for Drupal does not properly revert user sessions, which might allow remote attackers to perform requests with extra privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal ‘Token Authentication’ 组件安全绕过漏洞
Vulnerability Description
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。 Drupal的Token Authentication组件中存在一个访问绕过漏洞。攻击者可利用该漏洞绕过某些安全限制进而获取对应用程序敏感区的访问，从而执行未授权操作，这可能导致进一步的攻击。Token Authentication 6.x-1.7之前版本中存在该漏洞。
CVSS Information
N/A
Vulnerability Type
N/A