CVE-2024-11942

A File Manipulation vulnerability exists in Drupal Core (versions 10.0.0 before 10.2.10) due to a bug in the CKEditor 5 module that incorrectly handles image uploads. Under specific uncommon site configurations, an attacker could exploit this to move the entire webroot to a different location on ...

CVE-2024-11942 Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002

A vulnerability in Drupal Core allows File Manipulation.This issue affects Drupal Core: from 10.0.0 before 10.2.10...

Drupal 10.2.x < 10.2.10 Drupal Vulnerability (SA-CORE-2024-002)

According to its self-reported version, the instance of Drupal running on the remote web server is 10.2.x prior to 10.2.10. It is, therefore, affected by a vulnerability. - A vulnerability in Drupal Core allows File Manipulation.This issue affects Drupal Core: from 10.0.0 before 10.2.10...