Deprecated - Security advisories for contributed projects

This forum is deprecated — view current Drupal contributed projects security advisories

SA-CONTRIB-2015-068 - Campaign Monitor - Cross Site Request Forgery (CSRF)

By Drupal Security Team on 4 Mar 2015 at 16:44 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-068
Project: Campaign Monitor (third-party module)
Version: 7.x
Date: 2015-March-04
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2015-067 - Finder - Open Redirect

By Drupal Security Team on 4 Mar 2015 at 16:41 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-067
Project: Finder (third-party module)
Version: 6.x, 7.x
Date: 2015-March-04
Security risk: 9/25 ( Less Critical) AC:Complex/A:None/CI:None/II:None/E:Theoretical/TD:All
Vulnerability: Open Redirect

SA-CONTRIB-2015-066 - Tracking Code - Cross Site Request Forgery (CSRF)

By Drupal Security Team on 4 Mar 2015 at 16:39 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-066
Project: Tracking Code (third-party module)
Version: 7.x
Date: 2015-March-04
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2015-065 - Registration codes - Multiple vulnerabilities

By Drupal Security Team on 4 Mar 2015 at 16:35 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-065
Project: Registration codes (third-party module)
Version: 6.x, 7.x
Date: 2015-March-04
Security risk: 16/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting, Cross Site Request Forgery

SA-CONTRIB-2015-064 - Ubercart Discount Coupons - Cross Site Scripting (XSS)

By pere orga on 4 Mar 2015 at 16:29 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-064
Project: Ubercart Discount Coupons (third-party module)
Version: 6.x
Date: 2015-March-04
Security risk: 14/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-063 - Webform - Cross Site Scripting (XSS)

By Drupal Security Team on 4 Mar 2015 at 16:22 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-063
Project: Webform (third-party module)
Version: 6.x, 7.x
Date: 2015-March-04
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

Pages

Subscribe with RSS