Vulnerability in Twilio Project
CVE-2014-9023
The Twilio module 7.x-1.x before 7.x-1.9 for Drupal does not properly restrict access to the Twilio administration pages, which allows remote authenticated users to read and modify authentication tokens by leveraging the "access administration pages" Drupal permission.
EPSS: 0.010 (58.1th percentile) — read the EPSS interpretation.
Affected products
- Twilio_project Twilio — versions 7.x-1.1, 7.x-1.2, 7.x-1.4
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)