2 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-6342
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces...
9.8CVSS8.2AI score0.02202EPSS
SaveExploits0References2
CVE-2024-13279
The Drupal Two-factor Authentication (TFA) module (versions prior to 1.8.0 ) is vulnerable to Session Fixation due to improper session management. Specifically, the module fails to sufficiently migrate sessions before prompting for a second factor token. A successful exploit could allow a malicio...
9.8CVSS6.7AI score0.00459EPSS
SaveExploits0References1Affected Software1
20