Lucene search

[email protected]CVE-2014-5268

HistoryDec 01, 2014 - 4:59 p.m.

CVE-2014-5268

2014-12-0116:59:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2014-5268

fasttoggle

drupal

remote attackers

account blocking

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.2%

JSON

The Fasttoggle module 7.x-1.3 and 7.x-1.4 for Drupal allows remote attackers to block or unblock an account via a crafted user status link.

Affected configurations

NVD

Node

fasttoggle_projectfasttoggleMatch7.x-1.3drupal

fasttoggle_projectfasttoggleMatch7.x-1.4drupal

CPENameOperatorVersion
fasttoggle_project:fasttogglefasttoggle project fasttoggleeq7.x-1.3
fasttoggle_project:fasttogglefasttoggle project fasttoggleeq7.x-1.4

CPE	Name	Operator	Version
fasttoggle_project:fasttoggle	fasttoggle project fasttoggle	eq	7.x-1.3
fasttoggle_project:fasttoggle	fasttoggle project fasttoggle	eq	7.x-1.4

References

www.drupal.org/node/2316065

www.drupal.org/node/2316747

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.2%

JSON

Related for CVE-2014-5268

prion1 drupal1 nvd1 cvelist1