VULNERABILITY INTELLIGENCE
CVE-2014-9023
CVSS score5.5 MEDIUM
EPSS probability0.97%
CISA KEVNot currently listed
Published2014-11-20
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:N
Description
The Twilio module 7.x-1.x before 7.x-1.9 for Drupal does not properly restrict access to the Twilio administration pages, which allows remote authenticated users to read and modify authentication tokens by leveraging the "access administration pages" Drupal permission.
Primary references
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory