Lucene search
Alpine Linux Development TeamALPINE:CVE-2020-13671HistoryNov 20, 2020 - 4:15 p.m.
CVE-2020-13671
2020-11-2016:15:00
Alpine Linux Development Team
security.alpinelinux.org
743
0.012 Low
EPSS
Percentile
85.4%
Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | drupal7 | <Â 7.74-r0 | UNKNOWN |
| Alpine | 3.11-community | noarch | drupal7 | <Â 7.74-r0 | UNKNOWN |
| Alpine | 3.12-community | noarch | drupal7 | <Â 7.74-r0 | UNKNOWN |
| Alpine | 3.13-community | noarch | drupal7 | <Â 7.74-r0 | UNKNOWN |
| Alpine | 3.14-community | noarch | drupal7 | <Â 7.74-r0 | UNKNOWN |
| Alpine | 3.15-community | noarch | drupal7 | <Â 7.74-r0 | UNKNOWN |
| Alpine | 3.16-community | noarch | drupal7 | <Â 7.74-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | drupal7 | <Â 7.74-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | drupal7 | <Â 7.74-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | drupal7 | <Â 7.74-r0 | UNKNOWN |
Related
veracode
veracode
Remote Code Execution (RCE)
2020-11-20 13:22:25
Remote Code Execution (RCE)
2020-11-20 09:24:06
drupal
drupal
Drupal core - Critical - Remote code execution - SA-CORE-2020-012
2020-11-18 00:00:00
openvas
openvas
Drupal 7.x, 8.x, 9.x RCE Vulnerability (SA-CORE-2020-012) - Linux
2020-11-20 00:00:00
Drupal 7.x, 8.x, 9.x RCE Vulnerability (SA-CORE-2020-012) - Windows
2020-11-20 00:00:00
Debian: Security Advisory (DLA-2458-1)
2020-11-20 00:00:00
friendsofphp
friendsofphp
Drupal core - Critical - Remote code execution - SA-CORE-2020-012
1970-01-01 00:00:00
Drupal core - Critical - Remote code execution - SA-CORE-2020-012
1970-01-01 00:00:00
ubuntucve
ubuntucve
CVE-2020-13671
2020-11-20 00:00:00
nessus
nessus
Drupal 7.x < 7.74 / 8.x < 8.8.11 / 8.9.x < 8.9.9 / 9.0.x < 9.0.8 RCE (SA-CORE-2020-012)
2020-11-20 00:00:00
Debian DLA-2458-1 : drupal7 security update
2020-11-20 00:00:00
Fedora 33 : drupal8 (2020-6f1079934c)
2020-12-15 00:00:00
cvelist
cvelist
CVE-2020-13671
2020-11-20 15:40:39
ibm
ibm
github
github
Drupal core Unrestricted Upload of File with Dangerous Type
2021-10-12 16:28:25
debiancve
debiancve
CVE-2020-13671
2020-11-20 16:15:00
attackerkb
attackerkb
CVE-2020-13671
2020-11-20 00:00:00
cisa_kev
cisa_kev
Drupal core Un-restricted Upload of File
2022-01-18 00:00:00
prion
prion
Code injection
2020-11-20 16:15:00
osv
osv
CVE-2020-13671
2020-11-20 16:15:15
BIT-drupal-2020-13671
2024-03-06 10:57:20
Drupal core Unrestricted Upload of File with Dangerous Type
2021-10-12 16:28:25
redhatcve
redhatcve
CVE-2020-13671
2022-05-20 23:37:25
cve
cve
CVE-2020-13671
2020-11-20 16:15:00
fedora
fedora
[SECURITY] Fedora 33 Update: drupal7-7.74-1.fc33
2020-11-27 01:24:16
[SECURITY] Fedora 32 Update: drupal7-7.74-1.fc32
2020-11-27 01:12:43
[SECURITY] Fedora 32 Update: drupal8-8.9.11-1.fc32
2020-12-15 01:41:04
debian
debian
[SECURITY] [DLA 2458-1] drupal7 security update
2020-11-19 11:47:34
cisa
cisa
CISA Adds 13 Known Exploited Vulnerabilities to Catalog
2022-01-18 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00