Deprecated - Security advisories for contributed projects

This forum is deprecated — view current Drupal contributed projects security advisories

SA-CONTRIB-2015-014 - Wishlist - Multiple vulnerabilities

By Drupal Security Team on 14 Jan 2015 at 17:31 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-014
Project: Wishlist Module (third-party module)
Version: 6.x, 7.x
Date: 2015-January-14
Security risk: 16/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting, Cross Site Request Forgery

SA-CONTRIB-2015-010 - Log Watcher - Cross Site Request Forgery (CSRF)

By Drupal Security Team on 7 Jan 2015 at 19:33 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-010
Project: Log Watcher (third-party module)
Version: 6.x
Date: 2015-January-07
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2015-013 - Field Display Label - Cross Site Scripting (XSS)

By Drupal Security Team on 7 Jan 2015 at 18:57 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-013
Project: Field Display Label (third-party module)
Version: 7.x
Date: 2015-January-07
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-012 - Jammer - Cross Site Request Forgery (CSRF)

By Drupal Security Team on 7 Jan 2015 at 18:54 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-012
Project: Jammer (third-party module)
Version: 6.x, 7.x
Date: 2015-January-07
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2015-011 - Todo Filter - Cross Site Request Forgery (CSRF)

By Drupal Security Team on 7 Jan 2015 at 18:34 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-011
Project: Todo Filter (third-party module)
Version: 6.x, 7.x
Date: 2015-January-07
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2015-009 - Linkit - Cross Site Scripting (XSS)

By Drupal Security Team on 7 Jan 2015 at 18:25 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-009
Project: Linkit (third-party module)
Version: 7.x
Date: 2015-January-07
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting

Pages

Subscribe with RSS