Логотип exploitDog
bind:CVE-2020-13671
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-13671

Количество 5

Количество 5

ubuntu логотип

CVE-2020-13671

больше 4 лет назад

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2020-13671

больше 4 лет назад

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2020-13671

больше 4 лет назад

Drupal core does not properly sanitize certain filenames on uploaded f ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-68jc-v27h-vhmw

больше 3 лет назад

Drupal core Unrestricted Upload of File with Dangerous Type

CVSS3: 8.8
EPSS: Низкий
fstec логотип

BDU:2020-05545

больше 4 лет назад

Уязвимость ядра CMS-системы Drupal, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2020-13671

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

CVSS3: 8.8
4%
Низкий
больше 4 лет назад
nvd логотип
CVE-2020-13671

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

CVSS3: 8.8
4%
Низкий
больше 4 лет назад
debian логотип
CVE-2020-13671

Drupal core does not properly sanitize certain filenames on uploaded f ...

CVSS3: 8.8
4%
Низкий
больше 4 лет назад
github логотип
GHSA-68jc-v27h-vhmw

Drupal core Unrestricted Upload of File with Dangerous Type

CVSS3: 8.8
4%
Низкий
больше 3 лет назад
fstec логотип
BDU:2020-05545

Уязвимость ядра CMS-системы Drupal, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.9
4%
Низкий
больше 4 лет назад

Уязвимостей на страницу