PT-2018-4259
CVE-2014-5170
·
Published
2018-03-29
·
Updated
2018-04-27
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Drupal Storage API module versions prior to 7.x-1.6
Description
The issue is related to the failure to update .htaccess file contents after a specific security update, which might allow remote attackers to execute arbitrary code.
Recommendations
For versions prior to 7.x-1.6, update the Storage API module to version 7.x-1.6 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾