Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47081

HistoryMay 21, 2024 - 6:12 a.m.

Unrestricted File Upload

2024-05-2106:12:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5

drupal

unrestricted file upload

file management

AI Score

7

Confidence

Low

drupal/core is vulnerable to Unrestricted File Upload. The vulnerability is caused by the failure to properly sanitize filenames within the file_save_upload() function. This allows an attacker to potentially upload malicious system files, such as .htaccess.

AI Score

7

Confidence

Low