Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

SA-CONTRIB-2015-071 - Simple Subscription - Cross Site Scripting (XSS)

By Drupal Security Team on 4 Mar 2015 at 17:30 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-071
Project: Simple subscription (third-party module)
Version: 6.x, 7.x
Date: 2015-March-04
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-070 - Mover - Cross Site Scripting (XSS) - Unsupported

By Drupal Security Team on 4 Mar 2015 at 16:49 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-070
Project: Mover (third-party module)
Version: 6.x
Date: 2015-March-04
Security risk: 14/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-069 - Taxonomy Accordion - Cross Site Scripting (XSS) - Unsupported

By Drupal Security Team on 4 Mar 2015 at 16:46 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-069
Project: Taxonomy Accordion (third-party module)
Version: 6.x, 7.x
Date: 2015-March-04
Security risk: 14/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-068 - Campaign Monitor - Cross Site Request Forgery (CSRF)

By Drupal Security Team on 4 Mar 2015 at 16:44 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-068
Project: Campaign Monitor (third-party module)
Version: 7.x
Date: 2015-March-04
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2015-067 - Finder - Open Redirect

By Drupal Security Team on 4 Mar 2015 at 16:41 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-067
Project: Finder (third-party module)
Version: 6.x, 7.x
Date: 2015-March-04
Security risk: 9/25 ( Less Critical) AC:Complex/A:None/CI:None/II:None/E:Theoretical/TD:All
Vulnerability: Open Redirect

SA-CONTRIB-2015-066 - Tracking Code - Cross Site Request Forgery (CSRF)

By Drupal Security Team on 4 Mar 2015 at 16:39 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-066
Project: Tracking Code (third-party module)
Version: 7.x
Date: 2015-March-04
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2015-065 - Registration codes - Multiple vulnerabilities

By Drupal Security Team on 4 Mar 2015 at 16:35 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-065
Project: Registration codes (third-party module)
Version: 6.x, 7.x
Date: 2015-March-04
Security risk: 16/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting, Cross Site Request Forgery

SA-CONTRIB-2015-064 - Ubercart Discount Coupons - Cross Site Scripting (XSS)

By pere orga on 4 Mar 2015 at 16:29 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-064
Project: Ubercart Discount Coupons (third-party module)
Version: 6.x
Date: 2015-March-04
Security risk: 14/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-063 - Webform - Cross Site Scripting (XSS)

By Drupal Security Team on 4 Mar 2015 at 16:22 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-063
Project: Webform (third-party module)
Version: 6.x, 7.x
Date: 2015-March-04
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-062 - Watchdog Aggregator - Cross Site Request Forgery (CSRF) - Unsupported

By Drupal Security Team on 25 Feb 2015 at 16:33 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-062
Project: Watchdog Aggregator (third-party module)
Version: 6.x, 7.x
Date: 2015-February-25
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery

Pages

Subscribe with RSS

SA-CONTRIB-2015-071 - Simple Subscription - Cross Site Scripting (XSS)

SA-CONTRIB-2015-070 - Mover - Cross Site Scripting (XSS) - Unsupported

SA-CONTRIB-2015-069 - Taxonomy Accordion - Cross Site Scripting (XSS) - Unsupported

SA-CONTRIB-2015-068 - Campaign Monitor - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-067 - Finder - Open Redirect

SA-CONTRIB-2015-066 - Tracking Code - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-065 - Registration codes - Multiple vulnerabilities

SA-CONTRIB-2015-064 - Ubercart Discount Coupons - Cross Site Scripting (XSS)

SA-CONTRIB-2015-063 - Webform - Cross Site Scripting (XSS)

SA-CONTRIB-2015-062 - Watchdog Aggregator - Cross Site Request Forgery (CSRF) - Unsupported

Pages

News items

Our community

Documentation

Drupal code base

Governance of community