Wednesday, June 2, 2021

Debian: CVE-2021-23017: nginx -- security update

debian vulnerabilities In: debian, vulnerabilities

Description
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.
Solution(s)
drupal-cve-2014-3704


Referenceshttps://attackerkb.com/topics/cve-2014-3704
70595
CVE - 2014-3704
DSA-3051
https://www.drupal.org/SA-CORE-2014-005