High DSA-4706-1 1 CVE

drupal7 - security update

Published Jun 18, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	drupal7	7.52-2+deb9u11

Vulnerabilities 1

High 8.8

CVE-2020-13663

Drupal Core Cross-Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities.

Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Alpine Packagist

Jun 11, 2021