Filtered by vendor Browserid Project Subscriptions
Filtered by product Browserid Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2012-2714 1 Browserid Project 1 Browserid 2024-11-21 9.8 Critical
The BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users via the audience identifier.
CVE-2012-2713 2 Browserid Project, Drupal 2 Browserid, Drupal 2024-11-21 N/A
Cross-site request forgery (CSRF) vulnerability in the BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that login a user to another web site.