CVE-2013-2198

CRÍTICO 9.8CVE-2013-2198 · Published 30/01/2020 · updated 16/06/2026

En resumen

CVE-2013-2198 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a login security (login security project).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.7%, mayor que el 77.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
login security login_security_project	`= 6.x-1.0= 6.x-1.x= 7.x-1.x≥ 6.x-1.0, ≤ 6.x-1.3≥ 7.x-1.0, ≤ 7.x-1.3`	No fix yet

Description

The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows attackers to bypass intended restrictions via a crafted username.

References

openwall.com/lists/oss-security/2013/06/20/3 · Mailing List
drupal.org/node/2023503 · Third Party Advisory
drupal.org/node/2023507 · Third Party Advisory
drupal.org/node/2023585 · Third Party Advisory

Más vulnerabilidades de login security

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free