H3XA — Operational Evidence

TypeVulnerability

External ID—

First seen2022-01-18

Last seen2022-01-18

Confidence

—

Improper sanitization in the extension file names is present in Drupal core.

Labels

exploitedkev

CISA KEV context

Vendor / productDrupal Drupal core

Added2022-01-18

Due date2022-07-18

2 recorded

Relationships

mitigates

from Remediate CVE-2020-13671

Mitigation

related-to

to Accessing Functionality Not Properly Constrained by ACLs

Technique

2 external

References

nvd

CVE-2020-13671

cwe

CWE-434