CERT-In issues alerts for multiple high severity vulnerabilities in Mozilla products and Drupal

CERT-In on Monday issued alerts for vulnerabilities in Mozilla products and Drupal which could allow remote attackers to bypass restrictions. In Mozilla products High severity vulnerabilities in Mozilla products could allow remote attackers to bypass security restrictions, execute arbitrary code and cause denial of service. When exploited successfully, the vulnerabilities could allow remote attackers to bypass security restrictions, execute arbitrary code and cause denial of services on the targeted systems. A vulnerability of medium severity in its Commerce Elavon module exists due to insufficient verification by the module, that it is communicating with the correct server when using the Elavon payment gateway.