Skip to main content

Mandrill

2 CVEs product

Monthly

CVE-2023-47828 MEDIUM This Month

Missing Authorization vulnerability in Mandrill wpMandrill.33. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Mandrill
NVD
CVSS 3.1
4.3
EPSS
0.4%
CVE-2012-5544 MEDIUM PATCH This Month

The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links by reading the logs in the Mandrill dashboard. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Mandrill
NVD
CVSS 2.0
4.0
EPSS
0.2%
EPSS 0% CVSS 4.3
MEDIUM This Month

Missing Authorization vulnerability in Mandrill wpMandrill.33. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Mandrill
NVD
EPSS 0% CVSS 4.0
MEDIUM PATCH This Month

The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links by reading the logs in the Mandrill dashboard. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Mandrill
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy