CVE-2015-5511

Published: Aug 18, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to bypass the user registration by administrator only configuration and create an account via a social login.

Affected (13)

Products: Hybridauth Social Login Project: Hybridauth Social Login

Hybridauth Social Login Project

1 product

Hybridauth Social Login

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.0
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.10
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.11
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.12
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.1
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.2
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.3
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.4
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.5
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.6
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.7
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.8
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.9