Drupal 'browserid' Cross-Site Request Forgery Vulnerability and Security Bypass Vulnerability

Release date:
Vulnerability version: 7. x-1.x vulnerability Description: Drupal is an open source CMS, can be used as a variety of website content management platform.

Drupal's BrowserID (Mozilla Persona) module has the Cross-Site Request Forgery Vulnerability and Security Bypass Vulnerability.

Attackers can exploit these vulnerabilities to bypass security restrictions to obtain sensitive information or perform unauthorized operations to obtain access to the affected applications, which may lead to further attacks.

BrowserID (Mozilla Persona) 7. These vulnerabilities are present in 7. x-1.3 versions prior to the x-1.x. <* Reference
Http://www.securityfocus.com/bid/53673
*>

Security recommendations: vendor solutions

Currently, the vendor has released an upgrade patch to fix this security issue. Obtain the patch link:
Http://drupal.org/node/1597414