Description
Improper sanitization in the extension file names is present in Drupal core.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Drupal Core | Drupal / Drupal Core | 7 versions prior to 7.74 | affected |
| Drupal Core | Drupal / Drupal Core | 8.8 versions prior to 8.8.11 | affected |
| Drupal Core | Drupal / Drupal Core | 8.9 versions prior to 8.9.9 | affected |
| Drupal Core | Drupal / Drupal Core | 9.0 versions prior to 9.0.8 | affected |