Skip to content
OpenAdvisories
Medium DLA-1746-1 1 CVE

drupal7 - security update

Published Apr 1, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 drupal7 7.32-1+deb8u16

Vulnerabilities 1

  • Medium 5.4
    CVE-2019-6341 EPSS 12%

    Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004

    In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prior to 8.6.13;Drupal 8.5 versions prior to 8.5.14. Under certain circumstances the File module/subsystem allows a malicious user to upload a file that can trigger a cross-site scripting (XSS) vulnerabi…

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Alpine Packagist