|
Drupal Form_mail Module Multiple CRLF Injection Vulnerabilities
The Form_mail module for Drupal is prone to multiple CRLF-injection vulnerabilities. Attackers may exploit these vulnerabilities to modify email headers and manipulate the structure of outgoing messages. For example, attackers may be able to set the recipient to an arbitrary value. Revisions prior to 1.8.2.2 are vulnerable; other versions may also be affected. These issues are related to one of the issues reported in BID 17104. |
|
|
Privacy Statement |
