Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Drupal Core 8.8.8, 8.9.1, 9.0.1 Clear all filters
TI-2020-10724 CVE-2020-13664 · GHSA-x72f-ggjw-v5xh

Command injection in Drupal Core

Priority MEDIUM 43

Arbitrary PHP code execution vulnerability in Drupal Core under certain circumstances.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02978 Published 2021-05-05 Fixed in 8.8.8, 8.9.1 +1 CWE-77
TI-2020-10725 CVE-2020-13665 · GHSA-wxqp-jwc9-g39x

Incorrect authorization in Drupal Core

Priority MEDIUM 45

Access bypass vulnerability in Drupal Core allows JSON:API when JSON:API is in read/write mode.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01275 Published 2021-05-05 Fixed in 8.8.8, 8.9.1 +1 CWE-863