Description
The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links by reading the logs in the Mandrill dashboard.
References (3)
Core 3
Core References
Patch, Vendor Advisory x_refsource_misc
http://drupal.org/node/1808846
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/11/20/4
Patch x_refsource_confirm
http://drupal.org/node/1807894
Scores
EPSS
0.0108
EPSS Percentile
61.2%
Details
CWE
CWE-200
Status
published
Products (3)
thinkshout/mandrill
7.x-1.0 (3 CPE variants)
thinkshout/mandrill
7.x-1.1
thinkshout/mandrill
7.x-1.x dev
Published
Dec 03, 2012
Tracked Since
Feb 18, 2026