Skip to content
OpenAdvisories
Unscored DSA-3075-1 2 CVEs

drupal7 - security update

Published Nov 20, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 drupal7 7.14-2+deb7u8

Vulnerabilities 2

  • Unscored —

    Drupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a crafted request, as demonst…

  • Unscored —
    CVE-2014-9016 Public exploit EPSS 79%

    The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.…