Skip to content
OpenAdvisories
Unscored DSA-3291-1 4 CVEs

drupal7 - security update

Published Jun 18, 2015 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 drupal7 7.14-2+deb7u10
Debian · 8 drupal7 7.32-1+deb8u4

Vulnerabilities 4

  • Unscored —

    The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated…

  • Unscored —

    Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users …

  • Unscored —

    Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users t…

  • Unscored —

    The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accoun…