Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-7570
4
MEDIUMCVSS v2
Published
October 3, 2016
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 8.0.0, = 8.1.0, = 8.1.9, = 8.0.4, = 8.0.5, = 8.1.8, = 8.1.6, = 8.1.5, = 8.1.2, = 8.1.4, = 8.0.2, = 8.1.1, = 8.0.3, = 8.0.6, = 8.1.7, = 8.1.3, = 8.0.1NVD
drupal
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app= 8.0.0, = 8.1.0, = 8.1.9, = 8.0.4, = 8.0.5, = 8.1.8, = 8.1.6, = 8.1.5, = 8.1.2, = 8.1.4, = 8.0.2, = 8.1.1, = 8.0.3, = 8.0.6, = 8.1.7, = 8.1.3, = 8.0.1NVD
NPM