Alpine/drupal7: high 8.8
Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP fo
Action: Upgrade drupal7 to 7.74-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.74-r0 | - |
Fixed versions
| 7.74-r0 |
Sources
- osv: ALPINE-CVE-2020-13671#Alpine:v3.12/drupal7
- https://security.alpinelinux.org/vuln/CVE-2020-13671
published · modified · JSON