CVE-2012-1591

Related Files

Mandriva Linux Security Advisory 2013-074

Posted Apr 9, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-074 - Drupal core's text filtering system provides several features including removing inappropriate HTML tags and automatically linking content that appears to be a link. A pattern in Drupal's text matching was found to be inefficient with certain specially crafted strings. This vulnerability is mitigated by the fact that users must have the ability to post content sent to the filter system such as a role with the post comments or Forum topic: Create new content permission. Drupal core's Form API allows users to set a destination, but failed to validate that the URL was internal to the site. Various other issues were also addressed.

tags | advisory

systems | linux, mandriva

advisories | CVE-2012-1588, CVE-2012-1589, CVE-2012-1590, CVE-2012-1591, CVE-2012-2153, CVE-2012-2922, CVE-2012-5651, CVE-2012-5653

SHA-256 | 305565fad63e2c490bf4982c07542b89e5b1bdde6be00766a998df8012622803

Download | Favorite | View

Drupal Core 7.x Denial Of Service / Access Bypass

Posted May 3, 2012

Site drupal.org

Core functionality of Drupal 7.x suffers from denial of service and access bypass vulnerabilities.

tags | advisory, denial of service, vulnerability

advisories | CVE-2012-1588, CVE-2012-1589, CVE-2012-1590, CVE-2012-1591

SHA-256 | aa32686e9c963d023728c1272ca5d040cf0afa985f4424b9984d7e5e667d95dc

Download | Favorite | View