CVE-2014-1398

Mô tả

Tham khảo

• lists.fedoraproject.org/pipermail/package-announce/2014-January/126811.html · Third Party Advisory
• lists.fedoraproject.org/pipermail/package-announce/2014-January/126816.html · Third Party Advisory
• openwall.com/lists/oss-security/2014/01/09/3 · Mailing List
• securityfocus.com/bid/64729 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• exchange.xforce.ibmcloud.com/vulnerabilities/90215 · Third Party Advisory
• drupal.org/node/2169595 · Patch

Lỗ hổng khác của entity api

• CVE-2026-81158TRUNG BÌNH 5.3Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1…
• CVE-2014-1400TRUNG BÌNH 6.5The entity_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended a…
• CVE-2014-1399TRUNG BÌNH 6.5The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass in…
• CVE-2015-2197THẤP 3.5Cross-site scripting (XSS) vulnerability in the Entity API module before 7.x-1.6 for Drupal allows remote authenticated users to inject arbi…
• CVE-2013-7391TRUNG BÌNH 5.0The Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows remote attackers to read…