PT-2015-7484

Name of the Vulnerable Software and Affected Versions Drupal OSF module versions 7.x-3.x before 7.x-3.1 Description The issue allows user-assisted remote attackers to delete arbitrary files when the OSF Ontology and OSF Import modules are enabled. Recommendations For versions 7.x-3.x before...

CVE-2015-7233: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Import module is enabled, allows remote attackers to hijack the authentication of administrators for requests that create new OSF datasets via unspecified vectors...

PT-2015-7483

Name of the Vulnerable Software and Affected Versions Drupal OSF module versions 7.x-3.x before 7.x-3.1 Description A cross-site request forgery CSRF issue exists in the OSF module for Drupal. This issue allows remote attackers to hijack the authentication of administrators for requests that crea...

CVE-2015-7234: Improper Input Validation

The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules are enabled, allows user-assisted remote attackers to delete arbitrary files via unspecified vectors...

Several Critical Flaws Patched in Drupal Module

There are several critical vulnerabilities in a middleware layer used in Drupal, including both cross-site scripting and cross-site request forgery bugs, that can be exploited remotely. The vulnerabilities are in the Open Semantic Framework, which is a third-party project and not part of the Drup...