Unscored CVE-2014-5170 EUVD-2014-5068GHSA-ffgv-x7xc-phrj

The Storage API module 7.x before 7.x-1.6 for Drupal might allow remote attackers to execute arbitrary code by leveraging failure to update…

Published Mar 29, 2018 · Updated Aug 6, 2024 · Assigned by mitre

Description

The Storage API module 7.x before 7.x-1.6 for Drupal might allow remote attackers to execute arbitrary code by leveraging failure to update .htaccess file contents after SA-CORE-2013-003.

References

https://www.drupal.org/node/2312769
https://www.drupal.org/node/2312655
drupal-cve20145170-code-exec(95054) vdb-entry
[oss-security] 20140731 Re: CVE request for Drupal contributed modules mailing-list