Vulnerabilities

TI-2015-06007 CVE-2015-7234 · GHSA-q3xf-76h8-w46p

The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import…

LOW 23

The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules are enabled, allows user-assisted remote attackers to delete arbitrary files via unspecified vectors.

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.02003 Published 2015-09-17 No fix listed CWE-20

TI-2015-06006 CVE-2015-7233 · GHSA-75jh-c69w-j2r8

Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1…

LOW 24

Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Import module is enabled, allows remote attackers to hijack the authentication of administrators for reque…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.00536 Published 2015-09-17 No fix listed CWE-352

TI-2015-06005 CVE-2015-7232 · GHSA-47w5-94q8-w9x4

Cross-site scripting (XSS) vulnerability in unspecified administration pages in the OSF…

LOW 15

Cross-site scripting (XSS) vulnerability in unspecified administration pages in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology module is enabled, allows remote attackers to inject arbitrary web s…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.00913 Published 2015-09-17 No fix listed CWE-79

Vulnerabilities

Filters

The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import…

Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1…

Cross-site scripting (XSS) vulnerability in unspecified administration pages in the OSF…