Drupal Secure Site Module vulnerabilities

2 CVEs affecting Drupal Secure Site Module, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-0568, published 2008-02-05.

More from Drupal.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-0568, published 2008-02-05. High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the IP-authentication feature in the Secure Site 5.x-1.0 and 4.7.x-1.0 module for Drupal allows remote attackers to gain the privileges of a user who has authenticated…
• CVE-2007-1033, published 2007-02-21. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Secure site 4.7.x-1.x-dev and 5.x-1.x-dev module for Drupal allows remote attackers to bypass access restrictions via a crafted URL.