CVE-2013-4595
The Secure Pages module 6.x-2.x before 6.x-2.0 for Drupal does not properly match URLs, which causes HTTP to be used instead of HTTPS and makes it easier for remote attackers to obtain sensitive information via a crafted web page.
Ver en NVDSeveridad
N/A
EPSS
Probabilidad de explotación (próx. 30 días): 0.0033 (0.3%)
Percentil: 55.9%
EPSS: 2026-05-06
Afecta
gordon_heydon:secure_pagesDescripción técnica
The Secure Pages module 6.x-2.x before 6.x-2.0 for Drupal does not properly match URLs, which causes HTTP to be used instead of HTTPS and makes it easier for remote attackers to obtain sensitive information via a crafted web page.
Publicada: 9/6/2014, 19:55:09
Última modificación: 6/5/2026, 22:30:45