Deprecated - Security advisories for contributed projects

This forum is deprecated — view current Drupal contributed projects security advisories

SA-CONTRIB-2015-038 - Facebook Album Fetcher - Cross Site Scripting (XSS) - Unsupported

By Drupal Security Team on 4 Feb 2015 at 18:38 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-038
Project: Facebook Album Fetcher (third-party module)
Version: 7.x
Date: 2015-February-04
Security risk: 12/25 ( Moderately Critical) AC:Complex/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-037 - Path Breadcrumbs - Access Bypass

By Drupal Security Team on 4 Feb 2015 at 18:02 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-037
Project: Path Breadcrumbs (third-party module)
Version: 7.x
Date: 2015-February-04
Security risk: 12/25 ( Moderately Critical) AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: Access bypass

SA-CONTRIB-2015-036 - Public Download Count - Cross Site Scripting (XSS) - Unsupported

By Drupal Security Team on 4 Feb 2015 at 17:39 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-036
Project: Public Download Count (third-party module)
Version: 7.x
Date: 2015-February-04
Security risk: 14/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-035 - Ajax Timeline - Cross Site Scripting (XSS)

By Drupal Security Team on 4 Feb 2015 at 17:22 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-035
Project: Ajax Timeline (third-party module)
Version: 7.x
Date: 2015-February-04
Security risk: 14/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-034 - Commerce WeDeal - Open Redirect

By Drupal Security Team on 4 Feb 2015 at 17:13 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-034
Project: Commerce WeDeal (third-party module)
Version: 7.x
Date: 2015-February-04
Security risk: 10/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:All
Vulnerability: Open Redirect

SA-CONTRIB-2015-033 - Certify - Access bypass and information disclosure

By Drupal Security Team on 28 Jan 2015 at 18:14 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-033
Project: Certify (third-party module)
Version: 6.x
Date: 2015-January-28
Security risk: 11/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:None/E:Theoretical/TD:All
Vulnerability: Access bypass, Information Disclosure, Multiple vulnerabilities

Pages

Subscribe with RSS