Lucene search
GoogleOSV:CVE-2020-13671HistoryNov 20, 2020 - 4:15 p.m.
CVE-2020-13671
2020-11-2016:15:15
Google
osv.dev
9
cve-2020-13671
drupal
filename sanitization
mime type
php execution
security vulnerability
software
hosting configurations
Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.
Related
drupal
drupal
Drupal core - Critical - Remote code execution - SA-CORE-2020-012
2020-11-18 00:00:00
ubuntucve
ubuntucve
CVE-2020-13671
2020-11-20 00:00:00
openvas
openvas
Drupal 7.x, 8.x, 9.x RCE Vulnerability (SA-CORE-2020-012) - Linux
2020-11-20 00:00:00
Drupal 7.x, 8.x, 9.x RCE Vulnerability (SA-CORE-2020-012) - Windows
2020-11-20 00:00:00
Fedora: Security Advisory for drupal7 (FEDORA-2020-7d8f772540)
2020-11-27 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2020-11-20 13:22:25
Remote Code Execution (RCE)
2020-11-20 09:24:06
friendsofphp
friendsofphp
Drupal core - Critical - Remote code execution - SA-CORE-2020-012
1970-01-01 00:00:00
Drupal core - Critical - Remote code execution - SA-CORE-2020-012
1970-01-01 00:00:00
cisa_kev
cisa_kev
Drupal core Un-restricted Upload of File
2022-01-18 00:00:00
debiancve
debiancve
CVE-2020-13671
2020-11-20 16:15:00
attackerkb
attackerkb
CVE-2020-13671
2020-11-20 00:00:00
prion
prion
Code injection
2020-11-20 16:15:00
alpinelinux
alpinelinux
CVE-2020-13671
2020-11-20 16:15:15
github
github
Drupal core Unrestricted Upload of File with Dangerous Type
2021-10-12 16:28:25
nessus
nessus
Drupal 7.x < 7.74 / 8.x < 8.8.11 / 8.9.x < 8.9.9 / 9.0.x < 9.0.8 RCE (SA-CORE-2020-012)
2020-11-20 00:00:00
Debian DLA-2458-1 : drupal7 security update
2020-11-20 00:00:00
Ubuntu 14.04 LTS : Drupal vulnerabilities (USN-6981-2)
2024-09-03 00:00:00
ibm
ibm
nvd
nvd
CVE-2020-13671
2020-11-20 16:15:15
cvelist
cvelist
CVE-2020-13671
2020-11-20 15:40:39
osv
osv
Drupal core Unrestricted Upload of File with Dangerous Type
2021-10-12 16:28:25
BIT-drupal-2020-13671
2024-03-06 10:57:20
drupal7 - security update
2020-11-19 00:00:00
redhatcve
redhatcve
CVE-2020-13671
2022-05-20 23:37:25
cve
cve
CVE-2020-13671
2020-11-20 16:15:15
fedora
fedora
[SECURITY] Fedora 32 Update: drupal7-7.74-1.fc32
2020-11-27 01:12:43
[SECURITY] Fedora 33 Update: drupal7-7.74-1.fc33
2020-11-27 01:24:16
[SECURITY] Fedora 33 Update: drupal8-8.9.11-1.fc33
2020-12-15 01:22:18
debian
debian
[SECURITY] [DLA 2458-1] drupal7 security update
2020-11-19 11:47:17
ubuntu
ubuntu
Drupal vulnerabilities
2024-08-27 00:00:00
Drupal vulnerabilities
2024-09-03 00:00:00
cisa
cisa
CISA Adds 13 Known Exploited Vulnerabilities to Catalog
2022-01-18 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00