Description

Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.

Remediation

References

CVE-2014-2983

Related Vulnerabilities

WordPress Plugin Background Music Cross-Site Scripting (1.0)

WordPress Plugin Sponsors Carousel Cross-Site Scripting (4.02)

Plone CMS CVE-2011-3587 Vulnerability (CVE-2011-3587)

Sqlite Other Vulnerability (CVE-2022-46908)

WordPress Plugin Custom 404 Pro Cross-Site Request Forgery (3.7.1)

Severity

Medium

Classification

CVE-2014-2983 CWE-200

Tags

Missing Update Known Vulnerabilities