PT-2024-40092

Name of the Vulnerable Software and Affected Versions: Drupal 8 core affected versions not specified Description: The issue arises from the file save upload function not removing leading and trailing dots from filenames, which could allow users to upload system files like .htaccess. This might...

CVE-2019-6342

An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4...

Views - Less Critical - Access Bypass - SA-CONTRIB-2016-036

An access bypass vulnerability exists in the Views module, where users without the "View content count" permission can see the number of hits collected by the Statistics module for results in the view. This issue is mitigated by the fact that the view must be configured to show a "Content...