Me Aliases
1 CVEs
product
Monthly
The me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to access Views using the "me" user argument handler by substituting "me" for a user id in. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.
Authentication Bypass
Me Aliases
NVD
CVSS 2.0
5.0
EPSS
0.6%
EPSS 1%
CVSS 5.0
MEDIUM
PATCH
This Month
The me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to access Views using the "me" user argument handler by substituting "me" for a user id in. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.
Authentication Bypass
Me Aliases
NVD