drupal/drupal

4 results · Clear filters · Feed

• High 8.8
  CVE-2020-13664 Public exploit

  Drupal Core Arbitrary PHP code execution vulnerability

  Arbitrary PHP code execution vulnerability in Drupal Core under certain circumstances. An attacker could trick an administrator into visiting a malicious site that could result in creating a carefully named directory on the file system. With this directory in…

  Drupal Drupal core drupal/core drupal/drupal Web / CMS Packagist
  May 5, 2021
• High 8.8
  CVE-2020-13671 Exploited Public exploit EPSS 36%

  Drupal core Unrestricted Upload of File with Dangerous Type

  Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupa…

  Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Alpine Packagist
  Nov 20, 2020

  KEV Jan 18, 2022
• High 8.1
  CVE-2019-6340 Exploited Public exploit EPSS 92%

  Drupal core - Highly critical - Remote Code Execution

  Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions …

  Drupal Drupal core drupal/core drupal/drupal Web / CMS Packagist
  Feb 21, 2019

  KEV Mar 25, 2022
• High 8.1
  CVE-2018-7602 Exploited · Ransomware Public exploit EPSS 99%

  Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

  A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is relat…

  Drupal Core drupal/core drupal/drupal Ubuntu Alpine Packagist
  Jul 19, 2018

  KEV Apr 13, 2022