CVE-2015-5502

Published: Aug 18, 2015Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Storage API module 7.x-1.x before 7.x-1.8 for Drupal does not properly restrict access to Storage API fields attached to entities that are not nodes, which allows remote attackers to have unspecified impact via unknown vectors.

Affected (8)

Products: Storage Api Project: Storage Api

Storage Api Project

1 product

Storage Api

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Storage Api Project Storage Api	Version 7.x-1.0
Storage Api Project Storage Api	Version 7.x-1.1
Storage Api Project Storage Api	Version 7.x-1.2
Storage Api Project Storage Api	Version 7.x-1.3
Storage Api Project Storage Api	Version 7.x-1.4
Storage Api Project Storage Api	Version 7.x-1.5
Storage Api Project Storage Api	Version 7.x-1.6
Storage Api Project Storage Api	Version 7.x-1.7