MGASA-2014-0322

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2014-0322.html
Import Source
https://advisories.mageia.org/MGASA-2014-0322.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2014-0322
Upstream
  • CVE-2014-2983
  • CVE-2014-5019
  • CVE-2014-5020
  • CVE-2014-5021
  • CVE-2014-5022
Published
2014-08-07T17:01:33Z
Modified
2026-04-16T06:25:32Z
Summary
Updated drupal packages fix security vulnerabilities
Details

An information disclosure vulnerability was discovered in Drupal before 7.27. When pages are cached for anonymous users, form state may leak between anonymous users. Sensitive or private information recorded for one anonymous user could thus be disclosed to other users interacting with the same form at the same time (CVE-2014-2983).

Multiple security issues in Drupal before 7.29, including a denial of service issue, an access bypass issue in the File module, and multiple cross-site scripting issues (CVE-2014-5019, CVE-2014-5020, CVE-2014-5021, CVE-2014-5022).

Drupal has been updated to version 7.29, fixing this and other bugs.

References
Credits

Affected packages

Mageia:3 / drupal

Package

Name
drupal
Purl
pkg:rpm/mageia/drupal?arch=source&distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.29-1.mga3

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2014-0322.json"

Mageia:4 / drupal

Package

Name
drupal
Purl
pkg:rpm/mageia/drupal?arch=source&distro=mageia-4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.29-1.mga4

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2014-0322.json"