https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-7234.htmlhttps://patchthecve.com/cve/CVE-2015-7234.htmlWed, 17 Jun 2026 00:32:06 +0000MEDIUM 4.0: The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules are enabled, allows user-assisted remote attackers to delete arbitrary files via unspecified vectors.https://patchthecve.com/cve/CVE-2015-7233.htmlhttps://patchthecve.com/cve/CVE-2015-7233.htmlWed, 17 Jun 2026 00:32:06 +0000MEDIUM 5.1: Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Import module is enabled, allows remote attackers to hijack the authentication of administrators for requests that create new OSF datasets via unspecified vectors.https://patchthecve.com/cve/CVE-2015-7232.htmlhttps://patchthecve.com/cve/CVE-2015-7232.htmlWed, 17 Jun 2026 00:32:05 +0000LOW 2.6: Cross-site scripting (XSS) vulnerability in unspecified administration pages in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology module is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.