PT-2019-20515 · Packagist · Drupal/Login Alert

Published

2019-02-06

·

Updated

2019-02-06

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
This module provides a field on user profiles which allows users to get a notification when their account logs in to the site. The notification e-mail includes a link which will terminate all sessions for that user. This is useful in the case of unauthorised access to the account.
The module doesn't employ sufficient randomness in the generation of URLs, which represents an Access Bypass vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

DRUPAL-CONTRIB-2019-013

Affected Products

Drupal/Login Alert