PT-2020-23063 · Packagist · Drupal/Prlp
Published
2020-05-27
·
Updated
2020-05-27
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
This module enables you to force a password update when using password reset link.
The module doesn't sufficiently validate the login URL allowing a malicious user to use a specially crafted URL to log in as another user.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Drupal/Prlp