[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-3897-1 drupal7 -- drupal7

ID: oval:org.secpod.oval:def:53079Date: (C)2019-04-04   (M)2023-12-20
Class: PATCHFamily: unix




Two vulnerabilities were discovered in Drupal, a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2015-7943 Samuel Mortenson and Pere Orga discovered that the overlay module does not sufficiently validate URLs prior to displaying their contents, leading to an open redirect vulnerability. More information can be found at https://www.drupal.org/SA-CORE-2015-004 CVE-2017-6922 Greg Knaddison, Mori Sugimoto and iancawthorne discovered that files uploaded by anonymous users into a private file system can be accessed by other anonymous users leading to an access bypass vulnerability. More information can be found at https://www.drupal.org/SA-CORE-2017-003

Platform:
Linux Mint 3
Product:
drupal7
Reference:
DSA-3897-1
CVE-2015-7943
CVE-2017-6922
CVE    2
CVE-2017-6922
CVE-2015-7943
CPE    58
cpe:/a:drupal:drupal:7.32
cpe:/a:drupal:drupal:7.33
cpe:/a:drupal:drupal:7.0:alpha7
cpe:/a:drupal:drupal:7.34
...

© SecPod Technologies