Unscored DSA-2828-1 2 CVEs

drupal6 - several

Published Dec 28, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	drupal6	6.29-1

Vulnerabilities 2

Unscored —

CVE-2013-6385

The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third-party modules, performs fo…

Dec 7, 2013
Unscored —

CVE-2013-6386

Drupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers, which uses predict…

Dec 7, 2013