- Vendor / Project
- Drupal
- Product
- Drupal core
- Date added
- Jan 18, 2022
- Due date
- Jul 18, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-434
Description
Improper sanitization in the extension file names is present in Drupal core.
Required action
Apply updates per vendor instructions.