CVE-2014-9153

概要

参考情報

• drupal.org/node/2344389 · Vendor Advisory
• drupal.org/node/2344423 · Vendor Advisory

services のその他の脆弱性

• CVE-2015-4394中 5.0The Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote attackers to bypass the field_access restriction and obtain sensitive p…
• CVE-2015-4393中 6.0The resource/endpoint for uploading files in the Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote authenticated users with t…
• CVE-2014-9152高 7.5The _user_resource_create function in the Services module 7.x-3.x before 7.x-3.10 for Drupal uses a password of 1 when creating new user acc…
• CVE-2014-9151高 7.5The Services module 7.x-3.x before 7.x-3.10 for Drupal does not properly limit the rate of authentication attempts, which makes it easier fo…
• CVE-2013-2158中 6.8Cross-site request forgery (CSRF) vulnerability in the Services module 6.x-3.x and 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers…