Vulnerability Bulletins

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-005

   
Affected software Drupal
 
Advisory ID: DRUPAL-SA-CORE-2016-005Project: Drupal core Version: 7.x, 8.xDate: 2016-November-16Security risk: 13/25 ( Moderately Critical) AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:UncommonVulnerability: Multiple vulnerabilities DescriptionInconsistent name for term access query (Less critical - Drupal 7 and Drupal 8)Drupal provides a mechanism to alter database SELECT queries before they are executed. Contributed and custom modules may use this mechanism to restrict access to certain

More info:

https://www.drupal.org/SA-CORE-2016-005