CVE-2014-9023

The Twilio module 7.x-1.x before 7.x-1.9 for Drupal does not properly restrict access to the Twilio administration pages, which allows remote authenticated…

published November 20, 2014

CVSS
—
EPSS
1%
Percentile
61.4
In the wild
Unconfirmed
What it is

The Twilio module 7.x-1.x before 7.x-1.9 for Drupal does not properly restrict access to the Twilio administration pages, which allows remote authenticated users to read and modify authentication tokens by leveraging the "access administration pages" Drupal permission.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00966 · 61.4th percentile
Published
2014-11-20T17:00Z
EPSS history
Timeline
  • 20 NOV 17:00Z
    The Twilio module 7.x-1.x before 7.x-1.9 for Drupal does not properly restrict access to the Twilio administration pages, which allows remote authenticated…
    cvelistv5