Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-1476
4
MEDIUMCVSS v2
Published
January 24, 2014
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The Taxonomy module in Drupal 7.x before 7.26, when upgraded from an earlier version of Drupal, does not properly restrict access to unpublished content, which allows remote authenticated users to obtain sensitive information via a listing page.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 7.0, = 7.16, = 7.21, = 7.18, = 7.15, = 7.10, = 7.11, = 7.19, = 7.22, = 7.17, = 7.24, = 7.12, = 7.13, = 7.20, = 7.2, = 7.14, = 7.23, = 7.1NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.= 7.0, = 7.16, = 7.21, = 7.18, = 7.15, = 7.10, = 7.11, = 7.19, = 7.22, = 7.17, = 7.24, = 7.12, = 7.13, = 7.20, = 7.2, = 7.14, = 7.23, = 7.1NVD