Drupal Core Information Disclosure Vulnerability (CNVD-2016-01931)

Drupal is a free and open source content management system developed in PHP. Drupal Core has a security vulnerability. In some configurations, a user's email address can be used to log in instead of their username, and a link to "Forgot Password" can display the username associated with a specifi...