Critical severity9.8NVD Advisory· Published Mar 29, 2018· Updated Jun 17, 2026
CVE-2014-5170
CVE-2014-5170
Description
The Storage API module 7.x before 7.x-1.6 for Drupal might allow remote attackers to execute arbitrary code by leveraging failure to update .htaccess file contents after SA-CORE-2013-003.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:drupal:storage_api:7.x-1.0:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:drupal:storage_api:7.x-1.0:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:storage_api:7.x-1.1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:storage_api:7.x-1.2:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:storage_api:7.x-1.3:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:storage_api:7.x-1.4:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:storage_api:7.x-1.5:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:storage_api:7.x-1.x-dev:*:*:*:*:*:*:*
- (no CPE)range: <7.x-1.6
Patches
Vulnerability mechanics
References
4- www.openwall.com/lists/oss-security/2014/07/31/4nvdMailing ListThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/95054nvdThird Party AdvisoryVDB Entry
- www.drupal.org/node/2312655nvdVendor Advisory
- www.drupal.org/node/2312769nvdVendor Advisory
News mentions
0No linked articles in our index yet.