14273 matches found
Drupal Releases Security Update to Address Vulnerability in Private Taxonomy Terms
Drupal has released a security update to address a vulnerability affecting private vocabulary modules for Drupal 8.x. An unauthorized user could exploit this vulnerability to bypass access permissions to create, modify, and delete private vocabulary terms. CISA encourages users and administrators...
CVE-2012-10004
A vulnerability was found in backdrop-contrib Basic Cart on Drupal. It has been classified as problematic. Affected is the function basiccartcheckoutformsubmit of the file basiccart.cart.inc. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading t...
Cross site scripting
A vulnerability was found in backdrop-contrib Basic Cart on Drupal. It has been classified as problematic. Affected is the function basiccartcheckoutformsubmit of the file basiccart.cart.inc. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading t...
CVE-2012-10004
The CVE-2012-10004 entry describes a cross-site scripting vulnerability in the Drupal Backdrop-contrib Basic Cart component. Affected is the function basic_cart_checkout_form_submit in the file basic_cart.cart.inc, with remote exploit possible. Upgrading to version 1.x-1.1.1 addresses the issue; ...
Fedora 35 : drupal7-context (2022-288e2fa22b)
The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-288e2fa22b advisory. - https://www.drupal.org/project/context/releases/7.x-3.11 - SA-CONTRIB-2022-049 Tenable has extracted the preceding description block directly from the Fedo...
Fedora 35 : drupal7-link (2022-74fe01686a)
The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-74fe01686a advisory. - https://www.drupal.org/project/link/releases/7.x-1.11 - SA-CONTRIB-2022-034 - https://www.drupal.org/project/link/releases/7.x-1.10 -...
Fedora 35 : drupal7 (2022-bf18450366)
The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-bf18450366 advisory. - 7.92 - 7.91 - SA-CORE-2022-012 / CVE-2022-25275 - 7.90 - 7.89 - 7.88 - SA-CORE-2022-003 / CVE-2022-25271 - 7.87 - 7.86 - SA-CORE-2022-001 /...
Drupal Releases Security Updates to Address Vulnerabilities in H5P and File (Field) Paths
Drupal has released security updates to address vulnerabilities affecting H5P and the File Field Paths modules for Drupal 7.x. An attacker could exploit these vulnerabilities to access sensitive information and remotely execute code. CISA encourages users and administrators to review Drupal’s...
File (Field) Paths - Moderately critical - Access bypass - SA-CONTRIB-2022-065
The File Field Paths module extends the default functionality of Drupal's core File module, by adding the ability to use entity-based tokens in destination paths and file names. The module's default configuration could temporarily expose private files to anonymous visitors. Important note: to fix...
Drupal H5P Module 2.0.0 Zip Slip Traversal Vulnerability
------------------------------------------------------------------ Drupal H5P Module statIndex$i'name'; 892. 893. if pregmatch'/^.|/./', $fileName !== 0 894. continue; // Skip any file or folder starting with a . or 894. This regex check should be enough to prevent path traversal attacks through...
Drupal H5P Module 2.0.0 Zip Slip Traversal
------------------------------------------------------------------ Drupal H5P Module statIndex$i'name'; 892. 893. if pregmatch'/^.|/./', $fileName !== 0 894. continue; // Skip any file or folder starting with a . or 894. This regex check should be enough to prevent path traversal attacks through...
DRUPAL-CONTRIB-2022-062
Social Private Message module allows users on the platform to allow users to send private messages to each other. The module does not properly perform the correct access checks for certain operations...
[SECURITY] Fedora 35 Update: drupal7-i18n-1.31-1.fc35
This is a collection of modules to extend Drupal core multilingual capabiliti es and be able to build real life multilingual sites. Some features: Taxonomy translation both, per language terms and translatable terms Multilingual variables Multilingual blocks control visibility per language and...
[SECURITY] Fedora 36 Update: drupal7-i18n-1.31-1.fc36
This is a collection of modules to extend Drupal core multilingual capabiliti es and be able to build real life multilingual sites. Some features: Taxonomy translation both, per language terms and translatable terms Multilingual variables Multilingual blocks control visibility per language and...
[SECURITY] Fedora 37 Update: drupal7-i18n-1.31-1.fc37
This is a collection of modules to extend Drupal core multilingual capabiliti es and be able to build real life multilingual sites. Some features: Taxonomy translation both, per language terms and translatable terms Multilingual variables Multilingual blocks control visibility per language and...
[SECURITY] Fedora 35 Update: drupal7-context-3.11-1.fc35
Context allows you to manage contextual conditions and reactions for different portions of your site. You can think of each context as representing a "secti on" of your site. For each context, you can choose the conditions that trigger th is context to be active and choose different aspects of...
[SECURITY] Fedora 35 Update: drupal7-link-1.11-1.fc35
The link module can be count to the top 50 modules in Drupal installations and provides a standard custom content field for links. With this module links can be added easily to any content types and profiles and include advanced validating and different ways of storing internal or external links...
[SECURITY] Fedora 36 Update: drupal7-context-3.11-1.fc36
Context allows you to manage contextual conditions and reactions for different portions of your site. You can think of each context as representing a "secti on" of your site. For each context, you can choose the conditions that trigger th is context to be active and choose different aspects of...
[SECURITY] Fedora 36 Update: drupal7-link-1.11-1.fc36
The link module can be count to the top 50 modules in Drupal installations and provides a standard custom content field for links. With this module links can be added easily to any content types and profiles and include advanced validating and different ways of storing internal or external links...
[SECURITY] Fedora 37 Update: drupal7-context-3.11-1.fc37
Context allows you to manage contextual conditions and reactions for different portions of your site. You can think of each context as representing a "secti on" of your site. For each context, you can choose the conditions that trigger th is context to be active and choose different aspects of...