Api Key Manager
Monthly
Unauthenticated remote attackers can disclose sensitive information from Drupal sites that use the contributed API Key Manager module, as the vulnerability is network-reachable, low-complexity, and requires no privileges or user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). The flaw affects all versions of the module (per CPE) and results in a low confidentiality impact, with an EPSS score of 0.25% indicating a low likelihood of exploitation. No public exploit identified at time of analysis.
Unauthenticated remote attackers can disclose sensitive information from Drupal sites that use the contributed API Key Manager module, as the vulnerability is network-reachable, low-complexity, and requires no privileges or user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). The flaw affects all versions of the module (per CPE) and results in a low confidentiality impact, with an EPSS score of 0.25% indicating a low likelihood of exploitation. No public exploit identified at time of analysis.