Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-9015
6.8
MEDIUMCVSS v2
Published
November 24, 2014
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Drupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a crafted request, as demonstrated by a crafted request to a server that supports both HTTP and HTTPS sessions.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.>= 6.0, < 6.34, >= 7.0, < 7.34NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.>= 6.0, < 6.34, >= 7.0, < 7.34NVD