Drupal.org Drupal Core
8 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2017-6920 | 8 prior to 8.3.4 | Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects s | CRITICAL 9.8 | 20 % | ||
| CVE-2017-6932 | 7.x versions before 7.57 | Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulner | MEDIUM 4.7 | 1.2 % | ||
| CVE-2017-6931 | 8.4.x versions before 8.4.5 | In Drupal versions 8.4.x versions before 8.4.5 the Settings Tray module has a vulnerability that allows users to update certain data that th | MEDIUM 6.5 | 1.1 % | ||
| CVE-2017-6930 | 8.4.x versions before 8.4.5 | In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks the untranslated versi | HIGH 8.1 | 1.3 % | ||
| CVE-2017-6929 | 7.x versions before 7.57 | A jQuery cross site scripting vulnerability is present when making Ajax requests to untrusted domains. This vulnerability is mitigated by th | MEDIUM 6.1 | 1.2 % | ||
| CVE-2017-6928 | Drupal 7.x versions before 7.57 | Drupal core 7.x versions before 7.57 when using Drupal's private file system, Drupal will check to make sure a user has access to a file bef | MEDIUM 5.3 | 1.0 % | ||
| CVE-2017-6927 | 8.4.x versions before 8.4.5 and Drupal 7.x versions before 7.57 | Drupal 8.4.x versions before 8.4.5 and Drupal 7.x versions before 7.57 has a Drupal.checkPlain() JavaScript function which is used to escape | MEDIUM 6.1 | 1.6 % | ||
| CVE-2017-6926 | 8.4.x versions before 8.4.5 | In Drupal versions 8.4.x versions before 8.4.5 users with permission to post comments are able to view content and comments they do not have | HIGH 8.1 | 1.2 % |