Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.Project:
Date:
2019-March-13
Security risk:
Vulnerability:
Information Disclosure
Description:
This module enables you to create customized lists of data.
The module doesn't sufficiently protect against argument definitions failing.
This vulnerability is mitigated by the fact that a view must have custom PHP code used as a field validator.
Solution:
Install the latest version:
- If you use the Views module for Drupal 7.x, upgrade to Views 7.x-3.21
Also see the Views project page.
Reported By:
Fixed By:
- Fabien Leroux
- Daniel Wehner
- Damien McKenna of the Drupal Security Team
- Len Swaneveld
Coordinated By:
- Michael Hess of the Drupal Security Team.
Additional information
Note: Drupal issues individual security advisories for separate vulnerabilities included in a release, rather than lumping "multiple vulnerabilities" into a single advisory. All advisories released today for Views:
