Логотип exploitDog
bind:CVE-2020-13671
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-13671

Количество 5

Количество 5

ubuntu логотип

CVE-2020-13671

около 5 лет назад

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2020-13671

около 5 лет назад

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2020-13671

около 5 лет назад

Drupal core does not properly sanitize certain filenames on uploaded f ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-68jc-v27h-vhmw

около 4 лет назад

Drupal core Unrestricted Upload of File with Dangerous Type

CVSS3: 8.8
EPSS: Низкий
fstec логотип

BDU:2020-05545

около 5 лет назад

Уязвимость ядра CMS-системы Drupal, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2020-13671

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

CVSS3: 8.8
5%
Низкий
около 5 лет назад
nvd логотип
CVE-2020-13671

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

CVSS3: 8.8
5%
Низкий
около 5 лет назад
debian логотип
CVE-2020-13671

Drupal core does not properly sanitize certain filenames on uploaded f ...

CVSS3: 8.8
5%
Низкий
около 5 лет назад
github логотип
GHSA-68jc-v27h-vhmw

Drupal core Unrestricted Upload of File with Dangerous Type

CVSS3: 8.8
5%
Низкий
около 4 лет назад
fstec логотип
BDU:2020-05545

Уязвимость ядра CMS-системы Drupal, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.9
5%
Низкий
около 5 лет назад

Уязвимостей на страницу