Lucene search
+L

7 matches found

NVD
NVD
added 2026/08/25 11:16 p.m.9 views

CVE-2026-18259

Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2...

7.5CVSS0.00245EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/25 10:21 p.m.33 views

CVE-2026-18259 Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090

Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2...

0.00245EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/25 10:21 p.m.21 views

CVE-2026-18259

Drupal Token Content Access (versions 0.0.0 through 3.1.2 ) contains an observable timing discrepancy in its access token comparison logic. Because the module does not sufficiently protect the token comparison in some cases, a persistent attacker who knows or discovers a URL for protected content...

7.5CVSS5.2AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/25 10:21 p.m.12 views

CVE-2026-18259 Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090

Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2...

7.5CVSS5.5AI score
SaveExploits0References5
OSV
OSV
added 2026/07/29 5:08 p.m.12 views

DRUPAL-CONTRIB-2026-090

The Token Content Access module enables site administrators to provide access to content using access tokens. The module does not sufficiently protect access token comparison in some cases. This could allow a persistent attacker to use a timing attack to guess a valid access token and bypass acce...

7.5CVSS5.8AI score0.00245EPSS
SaveExploits0References1
Drupal
Drupal
added 2026/07/29 12:00 a.m.26 views

Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090

The Token Content Access module enables site administrators to provide access to content using access tokens. The module does not sufficiently protect access token comparison in some cases. This could allow a persistent attacker to use a timing attack to guess a valid access token and bypass acce...

7.5CVSS5.8AI score0.00245EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/29 12:00 a.m.16 views

PT-2026-66339

Name of the Vulnerable Software and Affected Versions Token Content Access versions 0.0.0 through 3.1.2 Description An observable timing discrepancy exists in the Token Content Access module, which allows site administrators to grant content access via access tokens. The module fails to...

5.2AI score0.00245EPSS
SaveExploits0References3
Rows per page
Query Builder