DRUPAL-CONTRIB-2020-021
No scoreFix available
This module enables you to force a password update when using password reset link.
The module doesn't sufficiently validate the login URL allowing a malicious user to use a specially crafted URL to log in as another user.
What each source reports
OSV No score
This module enables you to force a password update when using password reset link.
The module doesn't sufficiently validate the login URL allowing a malicious user to use a specially crafted URL to log in as another user.
- Record
DRUPAL-CONTRIB-2020-021- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/prlpPackagist:https://packages.drupal.org/8 |
before 1.5.0 | 1.5.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2020-021 is a vulnerability with no CVSS score yet in drupal/prlp, published May 27, 2020. No source lists public exploit code. Fixed in drupal/prlp 1.5.0.