CVE-2014-9502

HIGH 8.8CVE-2014-9502 · Published 01/02/2018 · updated 17/06/2026

In short

CVE-2014-9502 is a HIGH (CVSS 8.8) vulnerability affecting open atrium (open atrium project).
Chance of exploitation in the next 30 days (EPSS): 0.93%, higher than 60.9% of all vulnerabilities.
Fix: update to 7.x-2.26 or later.

Package	Affected versions	Patched versions
open atrium open_atrium_project	`= 7.x-2.0≥ 7.x-2.0, < 7.x-2.26`	`7.x-2.26`

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified sub modules in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allow remote attackers to hijack the authentication of unknown victims via vectors related to menu callbacks.

References

openwall.com/lists/oss-security/2015/01/04/6 · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/99655 · Third Party Advisory
drupal.org/node/2394979 · Mitigation
drupal.org/node/2395045 · Patch

More vulnerabilities in open atrium

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free