Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The LoginToboggan module 7.x-1.x before 7.x-1.4 for Drupal does not properly unset the authorized user role for certain users, which allows remote attackers with the pre-authorized role to gain privileges and possibly obtain sensitive information by accessing a Page Not Found (404) page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal LoginToboggan模块信息泄露漏洞
Vulnerability Description
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。LoginToboggan是其中的一个为Drupal的注册和登录系统提供多种功能的模块。 Drupal LoginToboggan模块7.x-1.4之前7.x-1.x版本中存在安全漏洞，该漏洞源于程序没有正确为特定的用户复原授权的用户角色。远程攻击者可通过访问Page Not Found (404)页面利用该漏洞以pre-authorized角色获取权限，获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A