CVE-2014-2983

Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.

• CWE-200

• http://www.debian.org/security/2014/dsa-2913Third Party Advisory
• http://www.debian.org/security/2014/dsa-2914Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/04/22/2Mailing List, Third Party Advisory
• https://drupal.org/SA-CORE-2014-002Patch, Vendor Advisory
• http://www.debian.org/security/2014/dsa-2913Third Party Advisory
• http://www.debian.org/security/2014/dsa-2914Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/04/22/2Mailing List, Third Party Advisory
• https://drupal.org/SA-CORE-2014-002Patch, Vendor Advisory

Published

Apr 23, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-2974Cross-site request forgery (CSRF) vulnerability in php/user_…
• CVE-2014-2975Cross-site scripting (XSS) vulnerability in php/user_account…
• CVE-2014-2976Directory traversal vulnerability in Sixnet SixView Manager …
• CVE-2014-2977Multiple integer signedness errors in the Dispatch_Write fun…
• CVE-2014-2978The Dispatch_Write function in proxy/dispatcher/idirectfbsur…
• CVE-2014-2980Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier,…
• CVE-2014-2984Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-2986The vgic_distr_mmio_write function in the virtual guest inte…
• CVE-2014-2987Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2014-2988EGroupware Enterprise Line (EPL) before 1.1.20140505, EGroup…
• CVE-2014-2989Cross-site request forgery (CSRF) vulnerability in Open Asse…
• CVE-2014-2992The Misli.com application for Android does not verify X.509 …