logo

Database

Insecure file upload In drupal/drupal

Description

Unrestricted Upload of File with Dangerous Type

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2022-252772. NVD-2022-252773. OSV-2022-252774. GCVE-2022-25277

References

1. https://www.drupal.org/sa-core-2022-0142. https://github.com/drupal/core/commit/1cd1830d79f221cc8490f53c2bb487dd07094f173. https://github.com/drupal/core/commit/5d464ea4407c50e40dcf6cb5ee376e7b8dd36f3a4. https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2022-25277.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.