Deprecated - Security advisories for contributed projects

This forum is deprecated — view current Drupal contributed projects security advisories

SA-CONTRIB-2013-017 - Yandex.Metrics - Cross site scripting (XSS)

By Drupal Security Team on 20 Feb 2013 at 14:30 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-017
Project: Yandex.Metrics (third-party module)
Version: 6.x, 7.x
Date: 2013-February-20
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2013-016 - Banckle Chat - Access bypass - Unsupported

By Drupal Security Team on 13 Feb 2013 at 16:24 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-016
Project: Banckle Chat (third-party module)
Version: 7.x
Date: 2013-February-13
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2013-015 - Manager Change for Organic Groups - Cross site scripting (XSS)

By Drupal Security Team on 13 Feb 2013 at 15:36 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-015
Project: Manager Change for Organic Groups (third-party module)
Version: 7.x
Date: 2013-February-13
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2013-014 - Drush Debian Packaging - Information Disclosure - Unsupported

By Drupal Security Team on 30 Jan 2013 at 17:29 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-014
Project: Drush Debian Packaging (third-party module)
Version: 7.x
Date: 2013-January-30
Security risk: Critical
Exploitable from: Local
Vulnerability: Information Disclosure

SA-CONTRIB-2013-013 - Boxes - Cross site scripting (XSS)

By Drupal Security Team on 30 Jan 2013 at 17:06 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-013
Project: Boxes (third-party module)
Version: 7.x
Date: 2013-January-30
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2013-012 - Google Authenticator login - Access Bypass

By Drupal Security Team on 30 Jan 2013 at 17:00 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-012
Project: Google Authenticator login (third-party module)
Version: 7.x
Date: 2013-January-30
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Access bypass

Pages

Subscribe with RSS