Authentication flaw

2015-08-1818:00:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.6%

JSON

The HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to bypass the user registration by administrator only configuration and create an account via a social login.

CPENameOperatorVersion
hybridauth_social_logineq7.120.27
hybridauth_social_logineq7.120.210
hybridauth_social_logineq7.120.24
hybridauth_social_logineq7.120.211
hybridauth_social_logineq7.120.28
hybridauth_social_logineq7.120.22
hybridauth_social_logineq7.120.212
hybridauth_social_logineq7.120.21
hybridauth_social_logineq7.120.23
hybridauth_social_logineq7.120.20

Name	Operator	Version
hybridauth_social_login	eq	7.120.27
hybridauth_social_login	eq	7.120.210
hybridauth_social_login	eq	7.120.24
hybridauth_social_login	eq	7.120.211
hybridauth_social_login	eq	7.120.28
hybridauth_social_login	eq	7.120.22
hybridauth_social_login	eq	7.120.212
hybridauth_social_login	eq	7.120.21
hybridauth_social_login	eq	7.120.23
hybridauth_social_login	eq	7.120.20