Drupal — система управления контентом с открытым исходным кодом. На Drupal работает более миллиона сайтов — от личных блогов до сайтов компаний, политических партий и государственных организаций.
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 030
CVE-2016-7570
Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes.
CVE-2016-7571
Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 a ...
CVE-2016-7570
Drupal 8.x before 8.1.10 does not properly check for "Administer comme ...
CVE-2016-7572
The system.temporary route in Drupal 8.x before 8.1.10 does not proper ...
CVE-2016-7570
Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes.
CVE-2016-7571
Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception.
CVE-2016-7572
The system.temporary route in Drupal 8.x before 8.1.10 does not properly check for "Export configuration" permission, which allows remote authenticated users to bypass intended access restrictions and read a full config export via unspecified vectors.
CVE-2016-6211
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form.
CVE-2016-6212
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors.
CVE-2016-6211
The User module in Drupal 7.x before 7.44 allows remote authenticated ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2016-7570 Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes. | CVSS3: 4.3 | 2% Низкий | около 10 лет назад |
| CVE-2016-7571 Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 a ... | CVSS3: 6.1 | 1% Низкий | около 10 лет назад |
| CVE-2016-7570 Drupal 8.x before 8.1.10 does not properly check for "Administer comme ... | CVSS3: 4.3 | 2% Низкий | около 10 лет назад |
| CVE-2016-7572 The system.temporary route in Drupal 8.x before 8.1.10 does not proper ... | CVSS3: 4.3 | 2% Низкий | около 10 лет назад |
 | CVE-2016-7570 Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes. | CVSS3: 4.3 | 2% Низкий | около 10 лет назад |
| CVE-2016-7571 Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception. | CVSS3: 6.1 | 1% Низкий | около 10 лет назад |
| CVE-2016-7572 The system.temporary route in Drupal 8.x before 8.1.10 does not properly check for "Export configuration" permission, which allows remote authenticated users to bypass intended access restrictions and read a full config export via unspecified vectors. | CVSS3: 4.3 | 2% Низкий | около 10 лет назад |
| CVE-2016-6211 The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form. | CVSS3: 8.8 | 3% Низкий | около 10 лет назад |
| CVE-2016-6212 The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors. | CVSS3: 5.3 | 2% Низкий | около 10 лет назад |
| CVE-2016-6211 The User module in Drupal 7.x before 7.44 allows remote authenticated ... | CVSS3: 8.8 | 3% Низкий | около 10 лет назад |
Уязвимостей на страницу