Deprecated - Security advisories for contributed projects

This forum is deprecated — view current Drupal contributed projects security advisories

SA-CONTRIB-2015-056 - inLinks Integration - Cross Site Scripting (XSS) - Unsupported

By Drupal Security Team on 25 Feb 2015 at 16:14 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-056
Project: inLinks Integration (third-party module)
Version: 6.x, 7.x
Date: 2015-February-25
Security risk: 16/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-055 - Services single sign-on server helper - Open Redirect - Unsupported

By Drupal Security Team on 25 Feb 2015 at 16:07 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-055
Project: Services single sign-on server helper (third-party module)
Version: 7.x
Date: 2015-February-25
Security risk: 10/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:All
Vulnerability: Open Redirect

SA-CONTRIB-2015-054 - SMS Framework - Cross Site Scripting (XSS)

By Drupal Security Team on 25 Feb 2015 at 15:44 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-054
Project: SMS Framework (third-party module)
Version: 6.x
Date: 2015-February-25
Security risk: 15/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-053 - Entity API - Cross Site Scripting (XSS)

By Drupal Security Team on 25 Feb 2015 at 15:17 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-053
Project: Entity API (third-party module)
Version: 7.x
Date: 2015-February-25
Security risk: 12/25 ( Moderately Critical) AC:Complex/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-052 - RESTful Web Services - Access Bypass

By Drupal Security Team on 18 Feb 2015 at 16:17 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-052
Project: RESTful Web Services (third-party module)
Version: 7.x
Date: 2015-February-18
Security risk: 12/25 ( Moderately Critical) AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: Access bypass

SA-CONTRIB-2015-051 - Term Queue - Cross Site Scripting (XSS)

By Drupal Security Team on 18 Feb 2015 at 16:11 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-051
Project: Term Queue (third-party module)
Version: 6.x
Date: 2015-February-18
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting

Pages

Subscribe with RSS