CVE-2015-7234

The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules are enabled, allows user-assisted remote attackers to delete arbitrary files via unspecified vectors.

Score

CVSS 2.0 4.0 Medium

Status

Modified - cve@mitre.org

Published

2015-09-17

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Open Semantic Framework (Structured Dynamics)

References

• http://cgit.drupalcode.org/osf/commit/?id=35c6e61
• https://www.drupal.org/node/2537120
• https://www.drupal.org/node/2537860