coldbraid

CVE-2020-13671 Drupal Drupal Core

Improper sanitization in the extension file names is present in Drupal core.

CVSS
not scored

CWE-434

On CISA’s exploited list

Drupal core Un-restricted Upload of File

Added
2022-01-18
Federal patch deadline
2022-07-18
Ransomware use
not known