- Advisory ID: DRUPAL-SA-CONTRIB-2017-025
- Project: Remember Me (third-party module)
- Version: 7.x
- Date: 2017-March-01
2017-04-23 — This issue has been resolved with the release of remember_me 7.x-1.1
Remember me is a module that allows users to check "Remember me" when logging in.
The security team is marking this module unsupported. There is a known security issue with the module that has not been fixed by the maintainer. If you would like to maintain this module, please read: https://www.drupal.org/node/251466
CVE identifier(s) issued
- A CVE identifier will be requested, and added upon issuance, in accordance with Drupal Security Team processes.
- All versions
Drupal core is not affected. If you do not use the contributed Remember Me module, there is nothing you need to do.
If you use the remember_me module for Drupal 7.x you should uninstall it.
Also see the remember_me project page.
Contact and More Information
The Drupal security team can be reached at security at drupal.org or via the contact form at https://www.drupal.org/contact.
Follow the Drupal Security Team on Twitter at https://twitter.com/drupalsecurity