PatchTheCVErevisioning vulnerabilities and fixes
Recent CVEs affecting revisioning, with upgrade or downgrade steps. 2 tracked.
revisioning has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2014-06-09. Highest priority: CVE-2012-1635 (score 40/100).
- CVE-2013-4597 MEDIUM 4.0 DOWNGRADE The Revisioning module 7.x-1.x before 7.x-1.6 for Drupal does not properly check node access permissions for c
- CVE-2012-1635 MEDIUM 6.4 DOWNGRADE The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissio
FAQ
How do I fix revisioning vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is revisioning being exploited right now?
None of the tracked revisioning CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which revisioning CVE should I patch first?
CVE-2012-1635 currently ranks highest (40/100): The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissio.