| Package | Affected versions | Patched versions |
|---|---|---|
| drupal | ≥ 5.0, < 5.22≥ 6.0, < 6.16 | 5.226.16 |
Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free