MGASA-2014-0329
Updated drupal packages fix security vulnerability
A denial of service issue exists in Drupal before 7.31, due to XML entity expansion in a publicly accessible XML-RPC endpoint.
The drupal package has been updated to version 7.31 to fix this issue and other bugs. See the upstream advisory and release notes for more details.
What each source reports
OSV No score
Updated drupal packages fix security vulnerability
A denial of service issue exists in Drupal before 7.31, due to XML entity expansion in a publicly accessible XML-RPC endpoint.
The drupal package has been updated to version 7.31 to fix this issue and other bugs. See the upstream advisory and release notes for more details.
- Record
MGASA-2014-0329- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2014-0329 is a vulnerability with no CVSS score yet in drupal, published August 12, 2014. No source lists public exploit code. Fixed in drupal 7.31-1.mga3.