Skip to content
OpenAdvisories

Package · Alpine

drupal7

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2020-13671 Exploited Public exploit EPSS 36%

    Drupal core Unrestricted Upload of File with Dangerous Type

    Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupa…

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Alpine Packagist
    KEV Jan 18, 2022
  • High 7.8
    CVE-2020-28949 Exploited Public exploit EPSS 85%

    Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrappe…

    drupal7 drupal7 php-pear php-pear Debian Ubuntu Alpine
    KEV Aug 25, 2022
  • High 8.1
    CVE-2018-7602 Exploited · Ransomware Public exploit EPSS 99%

    Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

    A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is relat…

    Drupal Core drupal/core drupal/drupal Ubuntu Alpine Packagist
    KEV Apr 13, 2022