CVE-2009-2374

Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the…

published July 8, 2009

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the username and password in links that can be read from (1) the HTTP referer header of external web sites that are visited from those links or (2) when page caching is enabled, the Drupal page cache.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01396 · 72.2th percentile
Published
2009-07-08T15:00Z
EPSS history
Timeline
  • 08 JUL 15:00Z
    Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the…
    cvelistv5