Unscored CVE-2012-5544 EUVD-2012-5436GHSA-wp8g-2w7h-f8mq

The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links by reading the logs …

Published Dec 3, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links by reading the logs in the Mandrill dashboard.

References

http://drupal.org/node/1808846
[oss-security] 20121120 Re: CVE Request for Drupal Contributed Modules mailing-list
http://drupal.org/node/1807894