Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

References - Unsupported - SA-CONTRIB-2017-38

By Drupal Security Team on 12 Apr 2017 at 16:54 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-38
Project: References (third-party module)
Date: 12-Apr-2017

Filemaker Form - Critical - Unsupported - SA-CONTRIB-2017-37

By Drupal Security Team on 12 Apr 2017 at 16:38 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-37
Project: Filemaker Form (third-party module)
Date: 12-Apr-2017

Legal - Critical - Unsupported - SA-CONTRIB-2017-36

By Drupal Security Team on 12 Apr 2017 at 16:32 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-36
Project: Legal (third-party module)
Date: 12-Apr-2017

Book access - Critical - Unsupported - SA-CONTRIB-2017-35

By Drupal Security Team on 12 Apr 2017 at 16:25 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-35
Project: Book access (third-party module)
Date: 12-April-2017

Auto Login URL - Less Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-034

By Drupal Security Team on 5 Apr 2017 at 14:36 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-034
Project: Auto Login URL (third-party module)
Version: 7.x, 8.x
Date: 2017-April-05
Security risk: 8/25 ( Less Critical) AC:Complex/A:None/CI:None/II:None/E:Theoretical/TD:Default
Vulnerability: Access bypass

Linkit - Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-033

By Drupal Security Team on 22 Mar 2017 at 16:40 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-033
Project: Linkit- Enriched linking experience (third-party module)
Version: 8.x
Date: 2017-March-22
Security risk: 10/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: Access bypass

Office Hours - Moderately Critical - Cross Site Scripting - DRUPAL-SA-CONTRIB-2017-032

By Drupal Security Team on 22 Mar 2017 at 16:37 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-032
Project: Office Hours (third-party module)
Version: 7.x
Date: 2017-March-22
Security risk: 10/25 ( Moderately Critical) AC:Basic/A:Admin/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-001

By Drupal Security Team on 15 Mar 2017 at 19:24 UTC

Drupal 8.2.7, a maintenance release which contains fixes for security vulnerabilities, is now available for download.

Private - Critical - Access bypass - DRUPAL-SA-CONTRIB-2017-031

By Drupal Security Team on 15 Mar 2017 at 18:15 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-031
Project: Private (third-party module)
Version: 7.x
Date: 2017-March-15
Security risk: 15/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Access bypass

PRLP - Critical - Access Bypass and Privilege Escalation - SA-CONTRIB-2017-030

By Drupal Security Team on 8 Mar 2017 at 17:11 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-030
Project: Password Reset Landing Page (PRLP) (third-party module)
Version: 8.x
Date: 2017-March-08
Security risk: 16/25 ( Critical) AC:None/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Access bypass, Privilege escalation

Pages

Subscribe with RSS