Skip to content
OpenAdvisories

Package · Packagist

drupal/core-recommended

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-12393

    Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before…

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Packagist
  • Medium 5.3
    CVE-2024-45440 Public exploit Scanner template

    Drupal Full Path Disclosure

    core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Packagist