Critical severity9.8NVD Advisory· Published Mar 29, 2018· Updated Jun 17, 2026

CVE-2014-5170

Description

The Storage API module 7.x before 7.x-1.6 for Drupal might allow remote attackers to execute arbitrary code by leveraging failure to update .htaccess file contents after SA-CORE-2013-003.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Storage APIinferred
Range: <1.6
Package: https://wordpress.org/plugins/storage-api
Drupal/Storage APIllm-fuzzy
Range: <7.x-1.6

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2014/07/31/4nvdMailing ListThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/95054nvdThird Party AdvisoryVDB Entry
www.drupal.org/node/2312655nvdVendor Advisory
www.drupal.org/node/2312769nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000