security

Drupals security team har udsendt en advarsel vedr. modulet Panels op til og med version 3.9, som bliver benyttet i Ding op til og med 1.7:

"The Panels module allows a site administrator to create customized layouts for multiple uses.

The module doesn't sufficiently sanitize administrator supplied data.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer panel layouts"."

Drupals security team har udsendt en advarsel vedr. modulet Views bulk operations, som bliver benyttet i Ding:

"The Views Bulk Operations (VBO) module allows actions and rules to be run on