CVE-2018-25002

2020-12-3123:27:52

mitre

www.cve.org

8.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.2%

JSON

uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal’s security advisory policy.

References

www.drupal.org/project/kcfinder/issues/1768718

www.drupal.org/project/kcfinder/issues/1768720

www.drupal.org/sa-contrib-2018-024