Wednesday, June 2, 2021

Debian: CVE-2021-23017: nginx -- security update

Description
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.
Solution(s)
  • drupal-cve-2014-3704


  • References
  • https://attackerkb.com/topics/cve-2014-3704
  • 70595
  • CVE - 2014-3704
  • DSA-3051
  • https://www.drupal.org/SA-CORE-2014-005




  •  

    Copyright © 2020 Cyber Details - Vulnerability Database™

    Thanks for everything Templateism - You should have written the code a little more complicated