Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The "have you forgotten your password" links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain sensitive username information by leveraging a configuration that permits using an email address to login and a module that permits logging in.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal 信息泄露漏洞
Vulnerability Description
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。 Drupal 7.43之前7.x版本和8.0.4之前8.x版本的User模块中存在信息泄露漏洞，该漏洞源于在特定配置中，用户可以使用邮箱地址代替用户名登录。攻击者可借助‘忘记密码’链接利用该漏洞获取用户名。
CVSS Information
N/A
Vulnerability Type
N/A