Entity Api Project Entity Api
6 CVEs affecting Entity Api Project Entity Api. Latest disclosed: 2018-04-10. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-1400 | Medium | 6.5 | 2018-04-10 | The entity_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions… |
CVE-2014-1399 | Medium | 6.5 | 2018-04-10 | The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restr… |
CVE-2014-1398 | Medium | 6.5 | 2018-04-10 | The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restr… |
CVE-2015-2197 | | 2015-03-03 | Cross-site scripting (XSS) vulnerability in the Entity API module before 7.x-1.6 for Drupal allows remote authenticated users to inject arbitrary web script or… | |
CVE-2013-7391 | | 2014-07-19 | The Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows remote attackers to read restricted entitie… | |
CVE-2013-4273 | | 2014-07-19 | The Entity API module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to node comments, which allows remote authenticated users to read the… |