Vulnerabilities > Browserid Project

DATE CVE VULNERABILITY TITLE RISK
2020-01-09 CVE-2012-2714 Improper Authentication vulnerability in Browserid Project Browserid 7.X1.0/7.X1.1/7.X1.2
The BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users via the audience identifier.
network
low complexity
browserid-project CWE-287
critical
9.8