Unscored CVE-2015-5496 EUVD-2015-5451GHSA-gppq-mv4j-qr9r

The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via …

Published Aug 18, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via unspecified vectors.

References

74755 vdb-entry
https://www.drupal.org/node/2492205
[oss-security] 20150704 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-100 to SA-CONTRIB-2015-131) mailing-list