Packagist/drupal/core CVE-2019-6341: medium 5.4, EPSS 12.19%

Drupal Cross Site Scripting (XSS) vulnerability

Action: Upgrade drupal/core to 7.65.0 or later.

composer require drupal/core:7.65.0

composer require drupal/core:8.5.14

composer require drupal/core:8.6.13

Affected

Fixed versions

Sources

• osv: GHSA-cmmh-8mwp-gq5p
• https://nvd.nist.gov/vuln/detail/CVE-2019-6341
• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2019-6341.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2019-6341.yaml
• https://github.com/drupal/core
• https://lists.debian.org/debian-lts-announce/2019/04/msg00003.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWHF4LALNBZCXMITWWVWKY3PNVYTM3N7
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P4KTET2PTSIS3ZZ4SGBRQEN6CCLV5SYX
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QNTLCBAN6T7WYR5C4TNEYQD65IIR3V4P
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4SVTVIJ33XCFQ6X6XTVMQM3NPLP2WFS
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWHF4LALNBZCXMITWWVWKY3PNVYTM3N7
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P4KTET2PTSIS3ZZ4SGBRQEN6CCLV5SYX
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QNTLCBAN6T7WYR5C4TNEYQD65IIR3V4P
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y4SVTVIJ33XCFQ6X6XTVMQM3NPLP2WFS
• https://www.drupal.org/sa-core-2019-004
• https://www.synology.com/security/advisory/Synology_SA_19_13

CVE-2019-6341 · published 2022-05-24T16:56:28Z · modified 2025-12-10T23:41:14.823843Z · JSON