CVE-2010-2473

Published: 2019-11-07T19:15Z

Last Modified: 2024-11-21T01:16Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt