EUVD-2013-4131

Malware in sbrugna...

Drupal Mozilla Persona module cross-site request forgery vulnerability (CNVD-2020-16641)

Drupal is an open source content management system developed by the Drupal community using the PHP language.Mozilla Persona is one of the security authentication modules. A cross-site request forgery vulnerability exists in the 'personaxsrftoken' function of the persona.module in Mozilla Persona...

CVE-2013-4227

Cross-site request forgery CSRF vulnerability in the personaxsrftoken function in persona.module in the Mozilla Persona module 7.x-1.x before 7.x-1.11 for Drupal allows remote attackers to hijack the authentication of aribitrary users via a security token that is not a string data type...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the personaxsrftoken function in persona.module in the Mozilla Persona module 7.x-1.x before 7.x-1.11 for Drupal allows remote attackers to hijack the authentication of aribitrary users via a security token that is not a string data type...

CVE-2013-4227

Cross-site request forgery CSRF vulnerability in the personaxsrftoken function in persona.module in the Mozilla Persona module 7.x-1.x before 7.x-1.11 for Drupal allows remote attackers to hijack the authentication of aribitrary users via a security token that is not a string data type...

CVE-2013-4227

Cross-site request forgery CSRF vulnerability in the personaxsrftoken function in persona.module in the Mozilla Persona module 7.x-1.x before 7.x-1.11 for Drupal allows remote attackers to hijack the authentication of aribitrary users via a security token that is not a string data type...

CVE-2013-4227

The CVE affects Drupal with the Mozilla Persona module (7.x-1.x) prior to 7.x-1.11. A CSRF flaw exists in the persona_xsrf_token function where a security token not typed as a string can be accepted, enabling an attacker to hijack a user’s authentication. Root cause: token handling in persona_xsr...

CVE-2013-4227: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the personaxsrftoken function in persona.module in the Mozilla Persona module 7.x-1.x before 7.x-1.11 for Drupal allows remote attackers to hijack the authentication of aribitrary users via a security token that is not a string data type...

PT-2020-7486

Name of the Vulnerable Software and Affected Versions: Mozilla Persona module versions 7.x-1.x through 7.x-1.10 Description: A cross-site request forgery CSRF issue exists in the persona xsrf token function within the persona.module of the Mozilla Persona module for Drupal. This allows remote...

Authentication flaw

The BrowserID Mozilla Persona module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users via the audience identifier...

CVE-2012-2714

The CVE-2012-2714 entry concerns the Drupal BrowserID (Mozilla Persona) module for Drupal 7.x-1.x, vulnerable before 7.x-1.3. The underlying issue is insufficient validation of authentication requests, allowing remote attackers to hijack arbitrary user authentication via the audience identifier. ...

CVE-2012-2714: Improper Authentication

The BrowserID Mozilla Persona module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users via the audience identifier...

PT-2020-7209

Name of the Vulnerable Software and Affected Versions BrowserID Mozilla Persona module versions 7.x-1.x before 7.x-1.3 for Drupal Description The issue allows remote attackers to hijack the authentication of arbitrary users via the audience identifier. This is a problem where an attacker can take...

SA-CONTRIB-2013-064 - Persona - Cross site request forgery (CSRF)

This module enables users to sign into a Drupal website using Mozilla Persona. The module uses a security token to ensure that a sign-in request is made from a web page that is participating in the current session. It was possible for a security token that was not of type "string" to be accepted ...

MozTrap Open Redirect

Title: moztrap.mozilla.org URL Redirection Vulnerability Discovery Date: 15/04/13 | Release Date: 13/06/13 Author: Junaid Hussain illSecure Research Group Contact: [email protected] | Website: illSecure.com Risk: Low...

PT-2012-4204

Name of the Vulnerable Software and Affected Versions Drupal BrowserID Mozilla Persona module versions 7.x-1.x before 7.x-1.3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that login a user to another web...

CVE-2012-2713: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the BrowserID Mozilla Persona module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that login a user to another web site...

Drupal ‘BrowserID’ 跨站请求伪造漏洞和安全绕过漏洞

Drupal是一款开源CMS，可以作为各种网站的内容管理平台。 Drupal的BrowserID（Mozilla Persona）模块中存在跨站请求伪造漏洞和安全绕过漏洞。 攻击者可利用这些漏洞绕过安全限制进而获取敏感信息，或者执行未授权操作，获取对受影响应用程序的访问，这可能导致进一步的攻击。 BrowserID（Mozilla Persona） 7.x-1.3之前的7.x-1.x版本中存在这些漏洞。 0 7.x-1.x 厂商解决方案 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://drupal.org/node/1597414...

SA-CONTRIB-2012-085 - BrowserID - Multiple Vulnerabilities

CSRF Issue: CVE: CVE-2012-2713 BrowserID login theft: CVE: CVE-2012-2714 The BrowserID module provides integration with BrowserID also known as Mozilla Persona -- a Mozilla project that lets users of your site quickly and easily log in without needing to remember a password specific to your site...