CVE-2014-2983

no score yetEPSS 1.6%

Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2014-04-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

debian:debian_linux
drupal:drupal

References

http://www.debian.org/security/2014/dsa-2913
http://www.debian.org/security/2014/dsa-2914
http://www.openwall.com/lists/oss-security/2014/04/22/2
https://drupal.org/SA-CORE-2014-002
http://www.debian.org/security/2014/dsa-2913

Check your stack JSON