40 matches found
CVE-2020-13674
The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under some circumstances and lead to possible data integrity issues. Sites are only affected if the QuickEdit module which comes with the Standard profile is installed. Removing the...
UBUNTU-CVE-2020-13676
The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module which comes with the Standard profile is installed...
Cross site request forgery (csrf)
The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under some circumstances and lead to possible data integrity issues. Sites are only affected if the QuickEdit module which comes with the Standard profile is installed. Removing the...
CVE-2020-13676
CVE-2020-13676 involves the Drupal QuickEdit module (Standard profile) failing to properly enforce access to fields, potentially leading to unintended disclosure of field data. The issue affects sites where QuickEdit is installed; the vulerability description indicates a partial confidentiality i...
CVE-2020-13676
The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module which comes with the Standard profile is installed...
CVE-2020-13674
The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under some circumstances and lead to possible data integrity issues. Sites are only affected if the QuickEdit module which comes with the Standard profile is installed. Removing the...
CVE-2020-13674
CVE-2020-13674 affects the Drupal QuickEdit module (Standard profile). The issue is a cross-site request forgery due to improper validation of access to routes, leading to possible data integrity issues when QuickEdit is installed. Removing the "access in-place editing" permission from untrusted ...
PT-2022-8501 · Quickedit · Quickedit
Name of the Vulnerable Software and Affected Versions: QuickEdit module affected versions not specified Description: The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under some circumstances and lead to possible data integrity issues...
PT-2022-8503 · Drupal · Drupal Quickedit Module
Name of the Vulnerable Software and Affected Versions: Drupal QuickEdit module affected versions not specified Description: The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the...
Drupal 9.1.x < 9.1.13 Multiple Vulnerabilities
According to its self-reported version, the instance of Drupal running on the remote web server is 8.9.x prior to 8.9.19, 9.1.x prior to 9.1.13, or 9.2.x prior to 9.2.6. It is, therefore, affected by multiple vulnerabilities. - Under some circumstances, the Drupal core JSON:API module does not...
Drupal 9.2.x < 9.2.6 Multiple Vulnerabilities
According to its self-reported version, the instance of Drupal running on the remote web server is 8.9.x prior to 8.9.19, 9.1.x prior to 9.1.13, or 9.2.x prior to 9.2.6. It is, therefore, affected by multiple vulnerabilities. - Under some circumstances, the Drupal core JSON:API module does not...
Drupal 8.9.x < 8.9.19 Multiple Vulnerabilities
According to its self-reported version, the instance of Drupal running on the remote web server is 8.9.x prior to 8.9.19, 9.1.x prior to 9.1.13, or 9.2.x prior to 9.2.6. It is, therefore, affected by multiple vulnerabilities. - Under some circumstances, the Drupal core JSON:API module does not...
DRUPAL-CORE-2021-009
The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module which comes with the Standard profile is installed. This advisory is not covered by Drupal Steward...
DRUPAL-CORE-2021-007
The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under some circumstances and lead to possible data integrity issues. Sites are only affected if the QuickEdit module which comes with the Standard profile is installed. Removing the...
Drupal QuickEdit module 跨站请求伪造漏洞
Drupal is an open source content management system developed in PHP by the Drupal community. A cross-site request forgery vulnerability exists in the Drupal QuickEdit module, which allows a remote attacker to trick a victim into visiting a specially crafted web page and performing arbitrary actio...
Drupal core - Moderately critical - Access bypass - SA-CORE-2021-009
The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module which comes with the Standard profile is installed. This advisory is not covered by Drupal Steward...
Drupal 8.9.x < 8.9.19 / 9.1.x < 9.1.13 / 9.2.x < 9.2.6 Multiple Vulnerabilities (drupal-2021-09-15)
According to its self-reported version, the instance of Drupal running on the remote web server is 8.9.x prior to 8.9.19, 9.1.x prior to 9.1.13, or 9.2.x prior to 9.2.6. It is, therefore, affected by multiple vulnerabilities. - Under some circumstances, the Drupal core JSON:API module does not...
Drupal core - Moderately critical - Cross Site Request Forgery - SA-CORE-2021-007
The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under some circumstances and lead to possible data integrity issues. Sites are only affected if the QuickEdit module which comes with the Standard profile is installed. Removing the...
Cross-Site Scripting (XSS)
Drupal is susceptible to cross-site scripting XSS attacks. The attacks are possible because the entityLabel and fieldLabel parameters are not properly encoded. When an admin goes to edit the node using quickedit module, the entered script will execute...
QuickEdit Text Editor - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application QuickEdit Text Editor published at the 'play' market has multiple vulnerabilities...