Description

Drupal Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. Drupal Core versions 6.x ranging from 6.0 and up to and including 6.30 are vulnerable.

Remediation

Update to Drupal Core version 6.31 or latest

References

https://www.drupal.org/SA-CORE-2014-002

Related Vulnerabilities

WordPress Plugin WP REST API (WP API) Security Bypass (1.2.1)

WordPress Plugin WordPress Photo Gallery by Gallery Bank Unspecified Vulnerability (3.1.26)

WordPress Plugin Html5 Audio Player-Audio Player for WordPress Cross-Site Scripting (2.1.2)

SharePoint CVE-2021-1641 Vulnerability (CVE-2021-1641)

WordPress Plugin Easy Panorama Cross-Site Scripting (1.1.4)

Severity

High

Classification

CVE-2014-2983 CWE-200 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Information Disclosure