Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.6.
Cross-Site Request Forgery (CSRF) vulnerability in Drupal ECA: Event - Condition - Action allows Cross Site Request Forgery.This issue affects ECA: Event - Condition - Action: from 0.0.0 before 1.1.12, from 2.0.0 before 2.0.16, from 2.1.0 before 2.1.7, from 0.0.0 before 1.2..
Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal POST File allows Cross-Site Scripting (XSS).This issue affects POST File: from 0.0.0 before 1.0.2.
Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.9.
Incorrect Authorization vulnerability in Drupal Responsive and off-canvas menu allows Forceful Browsing.This issue affects Responsive and off-canvas menu: from 0.0.0 before 4.4.4.
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Image Sizes allows Forceful Browsing.This issue affects Image Sizes: from 0.0.0 before 3.0.2.
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Drupal Symfony Mailer Lite allows Cross Site Request Forgery.This issue affects Drupal Symfony Mailer Lite: from 0.0.0 before 1.0.6.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102.
End of life: 12/17/2024, End of support: 6/20/2024, Latest version: 10.2.12
End of life: 12/17/2024, End of support: 6/20/2024, Latest version: 10.2.12
End of life: 6/16/2025, End of support: 12/16/2024, Latest version: 11.0.13
End of life: 6/16/2025, End of support: 12/16/2024, Latest version: 11.0.13
End of life: 6/16/2025, End of support: 8/2/2024, Latest version: 10.3.14
End of life: 6/16/2025, End of support: 8/2/2024, Latest version: 10.3.14
End of life: 6/20/2024, End of support: 12/15/2023, Latest version: 10.1.8
End of life: 6/20/2024, End of support: 12/15/2023, Latest version: 10.1.8
The Media module does not properly check entity access in some circumstances. This may result in users seeing thumbnails of media items they do not have access to, including for private files. This release was coordinated with SA-CONTRIB-2023-010. This advisory is not covered by Drupal Steward.
End of life: 12/15/2023, End of support: 6/21/2023, Latest version: 10.0.11
End of life: 12/15/2023, End of support: 6/21/2023, Latest version: 10.0.11
End of life: 11/1/2023, End of support: 6/21/2023, Latest version: 9.5.11
End of life: 11/1/2023, End of support: 6/21/2023, Latest version: 9.5.11
End of life: 6/21/2023, End of support: 12/14/2022, Latest version: 9.4.15
End of life: 6/21/2023, End of support: 12/14/2022, Latest version: 9.4.15
End of life: 12/14/2022, End of support: 6/15/2022, Latest version: 9.3.22
End of life: 12/14/2022, End of support: 6/15/2022, Latest version: 9.3.22
End of life: 6/15/2022, End of support: 12/8/2021, Latest version: 9.2.21
End of life: 6/15/2022, End of support: 12/8/2021, Latest version: 9.2.21
End of life: 12/8/2021, End of support: 6/16/2021, Latest version: 9.1.15