← Back

CVE-2015-7234

nvd nist
Published: Sep 17, 2015Modified: May 6, 2026

JSON object

Loading...
4.0
Vector
AV:N/AC:H/Au:N/C:N/I:P/A:P
Exploitability: 4.9 / Impact: 4.9
Source: NVD

Description

The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules are enabled, allows user-assisted remote attackers to delete arbitrary files via unspecified vectors.

Affected (2)

Structured Dynamics
1 product
Open Semantic Framework
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Open Semantic Framework
Version 7.x-3.0
Open Semantic Framework
Version 7.x-3.x dev

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.