Cybersecurity Alerts

Drupal core Un-restricted Upload of File

Improper sanitization in the extension file names is present in Drupal core.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-434

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-13671