drupal panels: multiple vulnerabilities
| Package(s): | drupal7-panels |
CVE #(s): | |
| Created: | September 22, 2016 |
Updated: | September 28, 2016 |
| Description: |
The Drupal "Panels" contrib module suffers from multiple "critical" vulnerabilities. "Much of the functionality to modify these panels rely on backend routes that call administrative forms. These forms did not provide any access checks, or site specific encoded urls. This can allow an attacker to guess the backend url as an anonymous user and see data loaded for the form. " |
| Alerts: |
|
