Vulnerabilitycritical
Drupal addressed CVE-2020
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-13664 | Arbitrary PHP code execution vulnerability in Drupal Core under certain circumstances | 8.8 | 3% | ||
| CVE-2020-13671 | Unrestricted File Upload via Filename Sanitization Flaw in Drupal Core | 8.8 | 36% | KEV | KEV |
From the original article
1 min read at securityaffairs.com
Drupal development team has released security updates to address a remote code execution flaw, tracked as CVE-2020-13671. The Drupal development team has released security updates to fix a remote code execution vulnerability related caused by the failure to properly sanitize the names of uploaded files.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.