Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-2559
3.5
LOWCVSS v2
Published
March 25, 2015
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the same password hash as another account and a crafted password reset URL.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.>= 6.0, < 6.35, >= 7.0, < 7.35NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.>= 6.0, < 6.35, >= 7.0, < 7.35NVD