Drupal — система управления контентом с открытым исходным кодом. На Drupal работает более миллиона сайтов — от личных блогов до сайтов компаний, политических партий и государственных организаций.
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 030
CVE-2021-41183
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.
GHSA-68jc-v27h-vhmw
Drupal core Unrestricted Upload of File with Dangerous Type
GHSA-xv7v-rf6g-xwrc
Directory Traversal in typo3/phar-stream-wrapper
openSUSE-SU-2021:1267-1
Security update for php7-pear
SUSE-SU-2021:3018-1
Security update for php7-pear
openSUSE-SU-2021:3018-1
Security update for php7-pear
SUSE-SU-2021:3006-1
Security update for php74-pear
SUSE-SU-2021:2926-1
Security update for php72
openSUSE-SU-2021:2872-1
Security update for php7
ELSA-2021-9400
ELSA-2021-9400: bootstrap security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2021-41183 jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources. | CVSS3: 6.5 | 9% Низкий | около 5 лет назад |
| GHSA-68jc-v27h-vhmw Drupal core Unrestricted Upload of File with Dangerous Type | CVSS3: 8.8 | 36% Средний | около 5 лет назад |
| GHSA-xv7v-rf6g-xwrc Directory Traversal in typo3/phar-stream-wrapper | CVSS3: 9.8 | 5% Низкий | около 5 лет назад |
 | openSUSE-SU-2021:1267-1 Security update for php7-pear | 71% Высокий | около 5 лет назад | |
| SUSE-SU-2021:3018-1 Security update for php7-pear | 71% Высокий | около 5 лет назад | |
| openSUSE-SU-2021:3018-1 Security update for php7-pear | 71% Высокий | около 5 лет назад | |
| SUSE-SU-2021:3006-1 Security update for php74-pear | 71% Высокий | около 5 лет назад | |
| SUSE-SU-2021:2926-1 Security update for php72 | 71% Высокий | около 5 лет назад | |
| openSUSE-SU-2021:2872-1 Security update for php7 | 71% Высокий | около 5 лет назад | |
| ELSA-2021-9400 ELSA-2021-9400: bootstrap security update (IMPORTANT) | 85% Высокий | больше 5 лет назад |
Уязвимостей на страницу