Deprecated - Security advisories for contributed projects

This forum is deprecated — view current Drupal contributed projects security advisories

Open Graph Importer - Moderately Critical - Access bypass - Unsupported - SA-CONTRIB-2015-092

By Drupal Security Team on 1 Apr 2015 at 16:11 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-092
Project: Open Graph Importer (third-party module)
Version: 7.x
Date: 2015-April-01
Security risk: 10/25 ( Moderately Critical) AC:Basic/A:User/CI:None/II:Some/E:Theoretical/TD:Default
Vulnerability: Access bypass

Current Search Links - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-091

By Drupal Security Team on 1 Apr 2015 at 15:06 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-091
Project: Current Search Links (third-party module)
Version: 7.x
Date: 2015-April-01
Security risk: 15/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting

Password Policy - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-090

By Drupal Security Team on 1 Apr 2015 at 14:52 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-090
Project: Password policy (third-party module)
Version: 6.x, 7.x
Date: 2015-April-01
Security risk: 15/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting

EntityBulkDelete - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-089

By Drupal Security Team on 1 Apr 2015 at 14:48 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-089
Project: EntityBulkDelete (third-party module)
Version: 7.x
Date: 2015-April-01
Security risk: 16/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

Imagefield Info - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-088

By Drupal Security Team on 1 Apr 2015 at 14:43 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-088
Project: Imagefield Info (third-party module)
Version: 7.x
Date: 2015-April-01
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

Ubercart Webform Checkout Pane - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-087

By Drupal Security Team on 25 Mar 2015 at 16:24 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-087
Project: Ubercart Webform Checkout Pane (third-party module)
Version: 6.x, 7.x
Date: 2015-March-25
Security risk: 14/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

Pages

Subscribe with RSS