MGASA-2015-0253
- Source
- https://advisories.mageia.org/MGASA-2015-0253.html
- Import Source
- https://advisories.mageia.org/MGASA-2015-0253.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2015-0253
- Upstream
- Published
- 2015-07-01T12:40:22Z
- Modified
- 2026-04-16T06:25:13.384569999Z
- Summary
- Updated drupal package fixes security vulnerability
- Details
-
Incorrect cache handling made private content viewed by "user 1" exposed to other, non-privileged users (CVE-2015-3231).
A flaw in the Field UI module made it possible for attackers to redirect users to malicious sites (CVE-2015-3232).
Due to insufficient URL validation, the Overlay module could be used to redirect users to malicious sites (CVE-2015-3233).
The OpenID module allowed an attacker to log in as other users, including administrators (CVE-2015-3234).
- References
-
- https://advisories.mageia.org/MGASA-2015-0253.html
- https://bugs.mageia.org/show_bug.cgi?id=16147
- https://www.drupal.org/SA-CORE-2015-002
- https://www.drupal.org/drupal-7.36
- https://www.drupal.org/drupal-7.36-release-notes
- https://www.drupal.org/drupal-7.37
- https://www.drupal.org/drupal-7.37-release-notes
- https://www.drupal.org/drupal-7.38
- https://www.drupal.org/drupal-7.38-release-notes
- https://www.debian.org/security/2015/dsa-3291
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:4 / drupal
Package
- Name
- drupal
- Purl
- pkg:rpm/mageia/drupal?arch=source&distro=mageia-4
Mageia:5 / drupal
Package
- Name
- drupal
- Purl
- pkg:rpm/mageia/drupal?arch=source&distro=mageia-5