KLA10563
Multiple vulnerabilities in Drupal modules

Multiple serious vulnerabilities have been found in Drupal modules. Malicious users can exploit these vulnerabilities to bypass security restrictions, inject arbitrary code or obtain sensitive information.

Below is a complete list of vulnerabilities

1. Open redirect vulnerabilities in Commerce WeDeal, Node basket, Views and Node Invite modules can be exploited remotely via unspecified vectors;
2. XSS vulnerabilities in Ajax Timeline, Facebook Album Fetcher, Public Download Count, Taxonomy Tools, Node Access Product, Taxonomy Path, Commerce Balanced Payments, Node basket, Quizzler, Node Invite, Taxonews, Classified Ads, Nodeauthor and Content Analysis modules can be exploited remotely via a specially designed parameters or other unknown vectors;
3. Unknown vulnerability in Path Breadcrumbs module can be exploited remotely via a 403 page reading;
4. CSRF vulnerabilities in Node basket, Feature Set, Shibboleth Authentication, Corner, Node Invite, Patterns, Alfresco and Contact Form Fields modules can be exploited remotely via an unspecified vectors;
5. An improper access restrictions in Views module can be exploited remotely via an unknown vectors;
6. Improper token generation in Amazon AWS module can be exploited remotely via an unspecified vectors.

Commerce WeDeal versions earlier than 7.x-1.3
Ajax Timeline versions earlier than 7.x-1.1
Path Breadcrumbs versions earlier than 7.x-3.2
Facebook Album Fetcher all versions
Public Download Count versions earlier than 7.x-1.x-dev
Commerce Balanced Payments all versions
Taxonomy Tools versions earlier than 7.x-1.4
Node Access Product all versions
Taxonomy Path versions earlier than 7.x-1.2
Node basket all versions
Feature Set all versions
Views versions earlier than 6.x-2.18
Views 6.x-3.x versions earlier than 6.x-3.2
Views 7.x-3.x versions earlier than 7.x-3.10
Quizzler versions earlier than 7-x.1.16
Shibboleth Authentication versions earlier than 6.x-4.1
Shibboleth Authentication 7.x-4.x versions earlier than 7.x-4.1
Corner all versions
Amazon AWS versions earlier than 7.x-1.3
Node Invite versions earlier than6.x-2.5
Taxonews versions earlier than 6.x-1.2
Taxonews 7.x-1.x versions earlier than 7.x-1.1
Classified Ads versions earlier than 6.x-3.1
Classified Ads 7.x-3.x versions earlier than 7.x-3.1
Patterns versions earlier than 7.x-2.2
Alfresco versions earlier than 6.x-1.3
Nodeauthor all versions
Content Analysis versions earlier than 6.x-1.7
Contact Form Fields versions earlier than 6.x-2.3

Update to the latest version or check out another plugins to use.