Описание
The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which allows remote administrators with the "Import value sets" permission to execute arbitrary PHP code via the exported values list in a ctools import.
Ссылки
- Patch
- PatchVendor Advisory
- Patch
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:values_project:values:7.x-1.0:*:*:*:*:drupal:*:*
cpe:2.3:a:values_project:values:7.x-1.0:beta1:*:*:*:drupal:*:*
cpe:2.3:a:values_project:values:7.x-1.0:beta2:*:*:*:drupal:*:*
cpe:2.3:a:values_project:values:7.x-1.0:beta3:*:*:*:drupal:*:*
cpe:2.3:a:values_project:values:7.x-1.0:rc1:*:*:*:drupal:*:*
cpe:2.3:a:values_project:values:7.x-1.0:rc2:*:*:*:drupal:*:*
cpe:2.3:a:values_project:values:7.x-1.0:rc3:*:*:*:drupal:*:*
cpe:2.3:a:values_project:values:7.x-1.0:rc4:*:*:*:drupal:*:*
cpe:2.3:a:values_project:values:7.x-1.0:rc5:*:*:*:drupal:*:*
cpe:2.3:a:values_project:values:7.x-1.1:*:*:*:*:drupal:*:*
EPSS
Процентиль: 54%
0.00318
Низкий
9 Critical
CVSS3
6 Medium
CVSS2
Дефекты
CWE-94
Связанные уязвимости
CVSS3: 9
github
больше 3 лет назад
The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which allows remote administrators with the "Import value sets" permission to execute arbitrary PHP code via the exported values list in a ctools import.
EPSS
Процентиль: 54%
0.00318
Низкий
9 Critical
CVSS3
6 Medium
CVSS2
Дефекты
CWE-94