oss-sec mailing list archives

CVE request for Drupal core, and contributed modules


From: Forest Monsen <forest.monsen () gmail com>
Date: Wed, 6 Aug 2014 17:10:13 -0700

Hi there,

We'd like to request a CVE identifier for Drupal Core:

SA-CORE-2014-004 - Drupal core - Denial of service
https://www.drupal.org/SA-CORE-2014-004

And the appropriate number for the following Drupal contributed modules:

SA-CONTRIB-2014-075 - Biblio Autocomplete - SQL Injection and Access Bypass
https://www.drupal.org/node/2316717

SA-CONTRIB-2014-076 - Fasttoggle - Access bypass
https://www.drupal.org/node/2316747

Thanks -

Forest Monsen, for the Drupal Security Team

Current thread: