Project: 
Video
Date: 
2019-March-13
Security risk: 
Critical 19∕25 AC:None/A:Admin/CI:All/II:All/E:Theoretical/TD:All
Vulnerability: 
Remote Code Execution
Description: 

This module provides a field where editors can add videos to their content and this module offers functionality to transcode these videos to different sizes and formats.

The module doesn't sufficiently sanitize some user input on administrative forms.

Solution: 
  • If you use the Video module for Drupal 7.x, upgrade to Video 7.x-2.14

Also see the Video project page

Note that the Drupal 8 version of this module is unaffected.

Reported By: 
Fixed By: 
Coordinated By: