Unrated severityNVD Advisory· Published Apr 23, 2014· Updated Jun 17, 2026

CVE-2014-2983

Description

Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Drupal/Drupal2 versions
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*range: >=6.0,<6.31
- (no CPE)range: >=6.0, <=6.30, >=7.0, <=7.26
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

drupal.org/SA-CORE-2014-002nvdPatchVendor Advisory
www.debian.org/security/2014/dsa-2913nvdThird Party Advisory
www.debian.org/security/2014/dsa-2914nvdThird Party Advisory
www.openwall.com/lists/oss-security/2014/04/22/2nvdMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000