Skip to content
OpenAdvisories
Unscored DSA-3200-1 3 CVEs

drupal7 - security update

Published Mar 20, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 drupal7 7.14-2+deb7u9

Vulnerabilities 3

  • Unscored —

    Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by…

  • Unscored —

    Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to …

  • Unscored —

    Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote at…