What’s Vulnerable › Vulnerabilities

CVE-2014-8736

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-11-12 · updated 2026-06-17
• Weakness: CWE-200

Description

The Open Atrium Core module for Drupal before 7.x-2.22 allows remote attackers to bypass access restrictions and read file attachments that have been removed from a node by leveraging a previous revision of the node.

Affected products

• Open Atrium Project Open Atrium: through 7.x-2.21

References

• https://www.drupal.org/node/2357279
• https://www.drupal.org/node/2357295
• https://www.drupal.org/node/2357279
• https://www.drupal.org/node/2357295

Get alerted when CVE-2014-8736 or the next vulnerability affects your stack