All CVE records

CVE-2020-13671 — Drupal core Un-restricted Upload of File

CISA KEV listed Added January 18, 2022 Remediate by July 18, 2022

Description

Improper sanitization in the extension file names is present in Drupal core.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-13671

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer