CVE-2014-5268

2014-12-0116:59:00

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

70.1%

JSON

The Fasttoggle module 7.x-1.3 and 7.x-1.4 for Drupal allows remote attackers to block or unblock an account via a crafted user status link.

Affected configurations

Nvd

Node

fasttoggle_projectfasttoggleMatch7.x-1.3drupal

fasttoggle_projectfasttoggleMatch7.x-1.4drupal

VendorProductVersionCPE
fasttoggle_projectfasttoggle7.x-1.3cpe:2.3:a:fasttoggle_project:fasttoggle:7.x-1.3:*:*:*:*:drupal:*:*
fasttoggle_projectfasttoggle7.x-1.4cpe:2.3:a:fasttoggle_project:fasttoggle:7.x-1.4:*:*:*:*:drupal:*:*

Vendor	Product	Version	CPE
fasttoggle_project	fasttoggle	7.x-1.3	cpe:2.3:a:fasttoggle_project:fasttoggle:7.x-1.3:::::drupal::
fasttoggle_project	fasttoggle	7.x-1.4	cpe:2.3:a:fasttoggle_project:fasttoggle:7.x-1.4:::::drupal::