September 2018 - Security-news

Commerce Klarna Checkout - Moderately critical - Access bypass - SA-CONTRIB-2018-062
by security-news＠drupal.org 26 Sep '18

26 Sep '18

View online: https://www.drupal.org/sa-contrib-2018-062 Project: Commerce Klarna Checkout [1] Version: 7.x-1.4 Date: 2018-September-26 Security risk: *Moderately critical* 13∕25 AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All [2] Vulnerability: Access bypass Description: The Commerce Klarna Checkout module enables you to accept payments from the Klarna Checkout payment provider The module doesn't sufficiently validate the payment callback made by Klarna. An attacker could bypass the payment step. Solution: Install the latest version: * If you use the Commerce Klarna Checkout module for Drupal 7.x, upgrade to Commerce Klarna Checkout 7.x-1.5 [3] Also see the Commerce Klarna Checkout [4] project page. Reported By: * Josef Gullström [5] Fixed By: * Eirik Morland [6] * Josef Gullström [7] Coordinated By: * Greg Knaddison [8] of the Drupal Security Team [1] https://www.drupal.org/project/commerce_klarna_checkout [2] https://www.drupal.org/security-team/risk-levels [3] https://www.drupal.org/project/commerce_klarna_checkout/releases/7.x-1.5 [4] https://www.drupal.org/project/commerce_klarna_checkout [5] https://www.drupal.org/user/2400268 [6] https://www.drupal.org/user/1014468 [7] https://www.drupal.org/user/2400268 [8] https://www.drupal.org/user/32672

1 0

Taxonomy File Tree - Moderately critical - Access bypass - SA-CONTRIB-2018-061
by security-news＠drupal.org 26 Sep '18

26 Sep '18

View online: https://www.drupal.org/sa-contrib-2018-061 Project: Taxonomy File Tree [1] Version: 7.x-1.0 Date: 2018-September-26 Security risk: *Moderately critical* 13∕25 AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:All [2] Vulnerability: Access bypass Description: Taxonomy File Tree allows site managers to create file trees. For files managed as Drupal files, the module does not properly check that a user has access to a file before letting the user download the file. This vulnerability only affects sites that use private files. Solution: Install the latest version: * If you use the Taxonomy File Tree module for Drupal 7.x, upgrade to Taxonomy File Tree 7.x-1.1 [3] Also see the Taxonomy File Tree [4] project page. Reported By: * Nathaniel Catchpole [5] of the Drupal Security Team Fixed By: * James Aparicio [6] * Nathaniel Catchpole [7] of the Drupal Security Team * Francesco Placella [8] Coordinated By: * Greg Knaddison [9] of the Drupal Security Team [1] https://www.drupal.org/project/tft [2] https://www.drupal.org/security-team/risk-levels [3] https://www.drupal.org/project/tft/releases/7.x-1.1 [4] https://www.drupal.org/project/tft [5] https://www.drupal.org/user/35733 [6] https://www.drupal.org/user/2547544 [7] https://www.drupal.org/user/35733 [8] https://www.drupal.org/user/183211 [9] https://www.drupal.org/user/32672

1 0

Renderkit - Moderately critical - Access bypass - SA-CONTRIB-2018-060
by security-news＠drupal.org 19 Sep '18

19 Sep '18

View online: https://www.drupal.org/sa-contrib-2018-060 Project: Renderkit [1] Date: 2018-September-19 Security risk: *Moderately critical* 11∕25 AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon [2] Vulnerability: Access bypass Description: This module, typically in combination with cfr:cfrplugin, allows to compose behaviors from granular components. One of such behaviors is to display a list of related entities, for a given source entity and a given entity relation (e.g. an entity reference field). The components that display related content do not check if the user has access to view the related entities. This way e.g. unpublished nodes may be displayed to anonymous visitors. This vulnerability is mitigated by the facts that - a site builder must have used the component that displays "related" entities for a source entity, using cfr:cfrplugin, OR a programmer has used one of the affected components in code. - a source entity displayed this way must reference access-restricted content. Solution: Install the latest version: * If you use the Renderkit module for Drupal 7.x, upgrade to Renderkit 7.x-1.6 [3] Also see the Renderkit [4] project page. Reported By: * Andreas Hennings [5] Fixed By: * Andreas Hennings [6] Coordinated By: * Lee Rowlands [7] [1] https://www.drupal.org/project/renderkit [2] https://www.drupal.org/security-team/risk-levels [3] https://www.drupal.org/project/renderkit/releases/7.x-1.6 [4] https://www.drupal.org/project/renderkit [5] https://www.drupal.org/user/459338 [6] https://www.drupal.org/user/459338 [7] https://www.drupal.org/u/larowlan

1 0

Fraction - Less critical - XSS vulnerability - SA-CONTRIB-2018-059
by security-news＠drupal.org 05 Sep '18

05 Sep '18

View online: https://www.drupal.org/sa-contrib-2018-059 Project: Fraction [1] Date: 2018-September-05 Security risk: *Less critical* 5∕25 6/25 ( Less Critical) AC:Complex/A:Admin/CI:None/II:None/E:Theoretical/TD:All [2] Vulnerability: XSS vulnerability Description: This module enables you to create fields for storing decimal values as two integers (numerator and denominator) for maximum precision. The module doesn't sufficiently filter XSS strings out of field labels. This vulnerability is mitigated by the fact that an attacker must have a role with the ability to manage field configuration. Solution: Install the latest version: * If you use the Fraction module for Drupal 7.x, upgrade to Fraction 7.x-1.7 [3]. * If you use the Fraction module for Drupal 8.x, upgrade to Fraction 8.x-1.2 [4]. Also see the Fraction project page [5]. Reported By: * bucefal91 [6] Fixed By: * bucefal91 [7] * Michael Stenta [8], the module maintainer. Coordinated By: * Michael Hess [9] of the security team. [1] https://www.drupal.org/project/fraction [2] https://www.drupal.org/security-team/risk-levels [3] https://www.drupal.org/project/fraction/releases/7.x-1.7 [4] https://www.drupal.org/project/fraction/releases/8.x-1.2 [5] https://www.drupal.org/project/fraction [6] https://www.drupal.org/user/504128 [7] https://www.drupal.org/user/504128 [8] https://www.drupal.org/user/581414 [9] https://www.drupal.org/u/mlhess

1 0