Skip to content
OpenAdvisories
Unscored DSA-2983-1 4 CVEs

drupal7 - security update

Published Jul 20, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 drupal7 7.14-2+deb7u5

Vulnerabilities 4

  • Unscored —

    The multisite feature in Drupal 6.x before 6.32 and 7.x before 7.29 allows remote attackers to cause a denial of servic…

  • Unscored —

    The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authen…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Ajax system in Drupal 7.x before 7.29 allows remote attackers to inject…