SA-CONTRIB-2013-065 - Organic Groups - Access Bypass

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2013-065
  • Project: Organic groups (third-party module)
  • Version: 7.x
  • Date: 2013-August-07
  • Security risk: Critical
  • Exploitable from: Remote
  • Vulnerability: Access bypass, Multiple vulnerabilities
⋅ Categories: Drupal 7.x

SA-CONTRIB-2013-064 - Persona - Cross site request forgery (CSRF)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2013-064
  • Project: Mozilla Persona (third-party module)
  • Version: 7.x
  • Date: 2013-August-07
  • Security risk: Less critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Request Forgery
⋅ Categories: Drupal 7.x

SA-CONTRIB-2013-063 - Authenticated User Page Caching (Authcache) - Information Disclosure

By Drupal Security Team on
⋅ Categories: Drupal 7.x

SA-CONTRIB-2013-062 - RESTful Web Services (RESTWS) - Access Bypass

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2013-062
  • Project: RESTful Web Services (third-party module)
  • Version: 7.x
  • Date: 2013-August-07
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Access bypass
⋅ Categories: Drupal 7.x

SA-CONTRIB-2013-061 - Flippy - Access Bypass

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2013-061
  • Project: Flippy (third-party module)
  • Version: 7.x
  • Date: 2013-July-31
  • Security risk: Less critical
  • Exploitable from: Remote
  • Vulnerability: Access bypass
⋅ Categories: Drupal 7.x

SA-CONTRIB-2013-060 - Scald - Cross Site Scripting (XSS)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2013-060
  • Project: Scald (third-party module)
  • Version: 6.x, 7.x
  • Date: 2013-July-24
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting
⋅ Categories: Drupal 6.x, Drupal 7.x

Pages

Subscribe with RSS Subscribe to RSS - Deprecated - Security advisories for contributed projects