Deprecated - Security advisories for contributed projects

This forum is deprecated — view current Drupal contributed projects security advisories

Field Group - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2016-001

By Drupal Security Team on 6 Jan 2016 at 17:01 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2016-001
Project: Field Group (third-party module)
Version: 7.x
Date: 2016-January-06
Security risk: 12/25 ( Moderately Critical) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting

Block Class - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-175

By Drupal Security Team on 16 Dec 2015 at 19:26 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-175
Project: Block Class (third-party module)
Version: 7.x
Date: 2015-December-16
Security risk: 19/25 ( Critical) AC:None/A:Admin/CI:All/II:All/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

Open Atrium - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-174

By Drupal Security Team on 16 Dec 2015 at 16:39 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-174
Project: Open Atrium (third-party module)
Version: 7.x
Date: 2015-December-16
Security risk: 17/25 ( Critical) AC:None/A:None/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting

Select2 Field Widget - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-173

By Drupal Security Team on 16 Dec 2015 at 15:44 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-173
Project: Select2 Field Widget (third-party module)
Version: 7.x
Date: 2015-December-16
Security risk: 17/25 ( Critical) AC:None/A:None/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting

Values - Critical - Arbitrary PHP code execution - SA-CONTRIB-2015-172

By Drupal Security Team on 16 Dec 2015 at 15:27 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-172
Project: Values (third-party module)
Version: 7.x
Date: 2015-December-16
Security risk: 16/25 ( Critical) AC:Basic/A:Admin/CI:All/II:All/E:Proof/TD:Uncommon
Vulnerability: Arbitrary PHP code execution

Token Insert Entity - Moderately Critical - Access bypass and information disclosure - SA-CONTRIB-2015-171

By Drupal Security Team on 2 Dec 2015 at 20:57 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-171
Project: Token Insert Entity (third-party module)
Version: 7.x
Date: 2015-December-02
Security risk: 10/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: Access bypass, Information Disclosure

Pages

Subscribe with RSS