CVEvulnerability

CVE-2014-5267

6.8 MEDIUM Published 2014-09-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-09-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

modules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to have unspecified impact via a crafted DOCTYPE declaration in an XRDS document.

Affected configurations

• drupal drupal 6.0 • drupal drupal 6.1 • drupal drupal 6.2 • drupal drupal 6.3 • drupal drupal 6.4 • drupal drupal 6.5 • drupal drupal 6.6 • drupal drupal 6.7 • drupal drupal 6.8 • drupal drupal 6.9 • drupal drupal 6.10 • drupal drupal 6.11 • drupal drupal 6.12 • drupal drupal 6.13 • drupal drupal 6.14 • drupal drupal 6.15 • drupal drupal 6.16 • drupal drupal 6.17 • drupal drupal 6.18 • drupal drupal 6.19 • drupal drupal 6.20 • drupal drupal 6.21 • drupal drupal 6.22 • drupal drupal 6.23 • drupal drupal 6.24 • drupal drupal 6.25 • drupal drupal 6.26 • drupal drupal 6.27 • drupal drupal 6.28 • drupal drupal 6.29 • drupal drupal 6.30 • drupal drupal 6.31 • drupal drupal 6.32 • drupal drupal 7.0 • drupal drupal 7.1 • drupal drupal 7.2 • drupal drupal 7.3 • drupal drupal 7.4 • drupal drupal 7.5 • drupal drupal 7.6 • drupal drupal 7.7 • drupal drupal 7.8 • drupal drupal 7.9 • drupal drupal 7.10 • drupal drupal 7.11 • drupal drupal 7.12 • drupal drupal 7.13 • drupal drupal 7.14 • drupal drupal 7.15 • drupal drupal 7.16 • drupal drupal 7.17 • drupal drupal 7.18 • drupal drupal 7.19 • drupal drupal 7.20 • drupal drupal 7.21 • drupal drupal 7.22 • drupal drupal 7.23 • drupal drupal 7.24 • drupal drupal 7.25 • drupal drupal 7.26 … and 4 more

Related

Weakness · not in database (1)

References