Auto Login URL - Less Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-034
This module lets you create auto login URLs programmatically on demand and through tokens. The module does not provide sufficient protection when generating login URLs. An attacker could rebuild login URLs independently thereby logging in as another user. This vulnerability is mitigated by the fa...