Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-2983
5
MEDIUMCVSS v2
Published
April 23, 2014
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.>= 7.0, < 7.27, >= 6.0, < 6.31NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.>= 7.0, < 7.27, >= 6.0, < 6.31NVD