Skip to content
OpenAdvisories

Package · Packagist

drupal/graphql

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-13675

    Unrestricted Upload of File with Dangerous Type in Drupal core

    Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. The modules do not correctly run all file validation, which causes an access bypass vulnerability. An attacker might be able to upload files that bypass the file validation pr…

    Drupal Core drupal/core drupal/graphql Packagist