The Protected Pages module 7.x-2.x before 7.x-2.4 for Drupal allows remote attackers to bypass the password protection via a crafted path.Referenceshttps://www.drupal.org/node/2353451https://www.drupal.org/node/2378279
