CVE-2014-2983: Debian Linux

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.

Affected products

• Debian Debian Linux: version 6.0 only; version 7.0 only; version 8.0 only
• Drupal Drupal: from 6.0, before 6.31 (fixed in 6.31); from 7.0, before 7.27 (fixed in 7.27)

Published 2014-04-23. Last modified 2026-06-17.