Описание
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core allows Reflection Injection. This issue affects Drupal core versions: from 8.9.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.
EPSS
Процентиль: 26%
0.00326
Низкий
Дефекты
CWE-470
Связанные уязвимости
CVSS3: 8.1
github
9 дней назад
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core allows Reflection Injection. This issue affects Drupal core versions: from 8.9.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.
CVSS3: 9.8
fstec
27 дней назад
Уязвимость веб-интерфейса Field UI ( field_ui) ядра CMS-системы Drupal, позволяющая нарушителю выполнить произвольный код
EPSS
Процентиль: 26%
0.00326
Низкий
Дефекты
CWE-470