[dageshi]

For those who don't want to do a full core update, you can apply a one line patch by the looks of it.

http://www.reddit.com/r/drupal/comments/2jbuiz/drupal_732_fi...

[thathonkey]

7.32 is a one line change btw, so the patch is same difference.

[dageshi]

You're right, but whenever I hear the words "Core Update" I usually think "Testing". For something this serious just getting that vulnerability patched asap seems like a good idea, especially if you look after a lot of drupal sites.

[zaphoyd]

it might not be a one line change if you are on a version older than 7.31

[chx]

It is. Same patch applies back to 7.0 (and even earlier).