Skip to content
OpenAdvisories
High DSA-2804-1 5 CVEs

drupal7 - several

Published Nov 26, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 drupal7 7.14-2+deb7u1

Vulnerabilities 5

  • High 7.5
    CVE-2013-6389

    Drupal has open redirect vulnerability in the Overlay module

    Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

    drupal/drupal Packagist
  • Unscored —
    CVE-2013-6385

    The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third-party modules, performs fo…

  • Unscored —
    CVE-2013-6386

    Drupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers, which uses predict…

  • Unscored —
    CVE-2013-6387

    Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated user…

  • Unscored —
    CVE-2013-6388

    Cross-site scripting (XSS) vulnerability in the Color module in Drupal 7.x before 7.24 allows remote attackers to injec…