Drupal Core 12.0.0-beta1 Field UI Remote Code Execution Detection Tool

Drupal Core versions containing the Field UI module are vulnerable to remote code execution. This tool performs read-only version and Field UI checks to identify potentially affected installations...

Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules

Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Sever...

DRUPAL-CORE-2026-014

A remote code execution vulnerability exists within the Field UI module in Drupal core. The vulnerability is not directly exploitable with core alone, but multiple serious exploit paths exist with contributed modules. At least one known exploit path does not require authentication. Custom code ma...

Drupal 10.6.x < 10.6.19 / 11.3.x < 11.3.19 / 11.4.x < 11.4.10 Multiple Vulnerabilities (drupal-2026-10-14)

According to its self-reported version, the instance of Drupal running on the remote web server is 10.6.x prior to 10.6.19, 11.3.x prior to 11.3.19, or 11.4.x prior to 11.4.10. It is, therefore, affected by multiple vulnerabilities. - The Drupal core Link module provides a field type that can be...

PT-2026-114006

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 10.6.19 Drupal versions prior to 11.3.19 Drupal versions prior to 11.4.10 Description A remote code execution issue exists within the Field UI module field ui in Drupal core. While the issue is not directly exploitable...

EUVD-2015-3288

Malware in sbrugna...

CVE-2024-33859

An issue was discovered in Logpoint before 7.4.0. HTML code sent through logs wasn't being escaped in the "Interesting Field" Web UI, leading to XSS...

Mageia: Security Advisory (MGASA-2015-0253)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2015-0253 Updated drupal package fixes security vulnerability

Incorrect cache handling made private content viewed by "user 1" exposed to other, non-privileged users CVE-2015-3231. A flaw in the Field UI module made it possible for attackers to redirect users to malicious sites CVE-2015-3232. Due to insufficient URL validation, the Overlay module could be...

Updated drupal package fixes security vulnerability

Incorrect cache handling made private content viewed by "user 1" exposed to other, non-privileged users CVE-2015-3231. A flaw in the Field UI module made it possible for attackers to redirect users to malicious sites CVE-2015-3232. Due to insufficient URL validation, the Overlay module could be...

Drupal Field UI Module Open Redirect Vulnerability

Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. An open redirection vulnerability exists in the Field UI module in versions 7.x prior to Drupal 7.38. A remote...

Open redirect

Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter...

UBUNTU-CVE-2015-3232

Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter...

CVE-2015-3232

Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter...

CVE-2015-3232

CVE-2015-3232 is an open redirect vulnerability in the Drupal Field UI module for Drupal 7.x prior to 7.38. The flaw allows remote attackers to redirect users to arbitrary sites and conduct phishing via the destinations parameter. The vulnerability is tied to the Drupal 7.38 release, which fixes ...

CVE-2015-3232

Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter...

CVE-2015-3232

Removed by vendor...

CVE-2015-3232: Undefined Security Weakness

Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter...

Debian DSA-3291-1 : drupal7 - security update

Several vulnerabilities were found in drupal7, a content management platform used to power websites. - CVE-2015-3231 Incorrect cache handling made private content viewed by 'user 1' exposed to other, non-privileged users. - CVE-2015-3232 A flaw in the Field UI module made it possible for attacker...

FreeBSD : drupal -- multiple vulnerabilities (d605edb1-1616-11e5-a000-d050996490d0)

Drupal development team reports : Impersonation OpenID module - Drupal 6 and 7 - Critical A vulnerability was found in the OpenID module that allows a malicious user to log in as other users on the site, including administrators, and hijack their accounts. This vulnerability is mitigated by the...