Drupal — система управления контентом с открытым исходным кодом. На Drupal работает более миллиона сайтов — от личных блогов до сайтов компаний, политических партий и государственных организаций.
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 030
GHSA-75c5-f4gw-38r9
Multiple vulnerabilities through filename manipulation in Archive_Tar
GHSA-rpw6-9xfx-jvcx
Directory Traversal in Archive_Tar
ELSA-2021-0860
ELSA-2021-0860: ipa security and bug fix update (MODERATE)
CVE-2020-36193
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
CVE-2020-36193
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
CVE-2020-36193
Tar.php in Archive_Tar through 1.4.11 allows write operations with Dir ...
BDU:2021-05279
Уязвимость файла Tar.php пакета Archive_Tar библиотеки классов PHP PEAR, связанная с некорректным ограничением имени пути к каталогу, позволяющая нарушителю оказать воздействие на целостность данных
CVE-2020-36193
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
CVE-2020-13671
Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.
CVE-2020-13671
Drupal core does not properly sanitize certain filenames on uploaded f ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-75c5-f4gw-38r9 Multiple vulnerabilities through filename manipulation in Archive_Tar | CVSS3: 7.8 | 85% Высокий | больше 5 лет назад |
| GHSA-rpw6-9xfx-jvcx Directory Traversal in Archive_Tar | CVSS3: 7.5 | 71% Высокий | больше 5 лет назад |
| ELSA-2021-0860 ELSA-2021-0860: ipa security and bug fix update (MODERATE) | 85% Высокий | больше 5 лет назад | |
 | CVE-2020-36193 Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. | CVSS3: 7.5 | 71% Высокий | почти 6 лет назад |
 | CVE-2020-36193 Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. | CVSS3: 7.5 | 71% Высокий | почти 6 лет назад |
| CVE-2020-36193 Tar.php in Archive_Tar through 1.4.11 allows write operations with Dir ... | CVSS3: 7.5 | 71% Высокий | почти 6 лет назад |
 | BDU:2021-05279 Уязвимость файла Tar.php пакета Archive_Tar библиотеки классов PHP PEAR, связанная с некорректным ограничением имени пути к каталогу, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 7.5 | 71% Высокий | почти 6 лет назад |
 | CVE-2020-36193 Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. | CVSS3: 7.5 | 71% Высокий | почти 6 лет назад |
| CVE-2020-13671 Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74. | CVSS3: 8.8 | 36% Средний | почти 6 лет назад |
| CVE-2020-13671 Drupal core does not properly sanitize certain filenames on uploaded f ... | CVSS3: 8.8 | 36% Средний | почти 6 лет назад |
Уязвимостей на страницу