Project:
Vulnerability:
Cross Site Scripting
CVE IDs:
CVE-2019-6341
Description:
Under certain circumstances the File module/subsystem allows a malicious user to upload a file that can trigger a cross-site scripting (XSS) vulnerability.
Solution:
- If you are using Drupal 8.6, update to .
- If you are using Drupal 7, update to
Fixed By:
of the Drupal Security Team
of the Drupal Security Team
of the Drupal Security Team
Peter Wolanin of the Drupal Security Team
Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf drupal.org.
SOCIAL SHARE CARD GENERATOR