CVE-2015-2197

概要

参考情報

• securityfocus.com/bid/72806
• drupal.org/node/2437885 · Patch
• drupal.org/node/2437905 · Patch

entity api のその他の脆弱性

• CVE-2026-81158中 5.3Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1…
• CVE-2014-1400中 6.5The entity_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended a…
• CVE-2014-1399中 6.5The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass in…
• CVE-2014-1398中 6.5The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass in…
• CVE-2013-7391中 5.0The Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows remote attackers to read…