Tag1 D7ES Security Advisories

The User Alert module contained an Insecure Direct Object Reference (IDOR) vulnerability in its message dismissal endpoint, allowing authenticated users to mark any node as dismissed without proper access control checks.

The Entityreference Filter module exposed an unprotected callback function that allowed unauthorized users to trigger entity reference filter updates without proper access control.

The Responsive Favicons module does not filter administrator-entered text.

The SAML SSO - Service Provider module doesn't sufficiently sanitize user input.

The Term Reference Tree Widget module contained a Cross-Site Scripting (XSS) vulnerability in its tree list output function, allowing malicious users to inject JavaScript code through unsanitized token replacement and improper URI handling.

The Simple hierarchical select module contained a Cross-Site Scripting (XSS) vulnerability in its field formatter and term retrieval functions, allowing malicious users to inject JavaScript code through unsanitized term names.

The Best Reply module contained an access bypass vulnerability in its comment retrieval callback, allowing users to access comments on restricted content through insufficient access control validation.

The File (Field) Paths module contained a file path manipulation vulnerability where file objects maintained inconsistent URI state after file move operations, potentially leading to file access issues and data corruption.

The Username Enumeration Prevention module lacked flood control in password validation, allowing potential username enumeration through rapid password reset requests.

This vulnerability allows attackers to inject arbitrary properties into the JavaScript Object.prototype.