Drupal vulnerabilities
576 CVEs and advisories name Drupal as an affected vendor, 4 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-13311Allow All File Extensions for file fields - Critical - Unsupported - SA-CONTRIB-2024-075
- CVE-2024-13310Git Utilities for Drupal - Critical - Unsupported - SA-CONTRIB-2024-074
- CVE-2024-13309Login Disable - Critical - Access bypass - SA-CONTRIB-2024-073
- CVE-2024-13308Browser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072
- CVE-2024-13305Entity Form Steps - Moderately critical - Cross site scripting - SA-CONTRIB-2024-071
- CVE-2024-13304Minify JS - Moderately critical - Cross site request forgery - SA-CONTRIB-2024-070
- CVE-2024-13303Download All Files - Critical - Access bypass - SA-CONTRIB-2024-069
- CVE-2024-13302Pages Restriction Access - Critical - Access bypass - SA-CONTRIB-2024-068
- CVE-2024-13301OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) - Critical - Cross Site Scripting - SA-CONTRIB-2024-067
- CVE-2024-13300Print Anything - Critical - Unsupported - SA-CONTRIB-2024-066
- CVE-2024-13299Megamenu Framework - Critical - Unsupported - SA-CONTRIB-2024-065
- CVE-2024-13298Tarte au Citron - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-064
- CVE-2024-13297Eloqua - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-063
- CVE-2024-13296Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062
- CVE-2024-13295Node export - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-061
- CVE-2024-13294POST File - Critical - Cross Site Scripting, Arbitrary PHP code execution - SA-CONTRIB-2024-060
- CVE-2024-13293POST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-059
- CVE-2024-13292Tooltip - Moderately critical - Cross site scripting - SA-CONTRIB-2024-058
- CVE-2024-13291Basic HTTP Authentication - Critical - Access bypass - SA-CONTRIB-2024-057
- CVE-2024-13290OhDear Integration - Moderately critical - Access bypass - SA-CONTRIB-2024-056
- CVE-2024-13289Cookiebot + GTM - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-055
- CVE-2024-13288Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052
- CVE-2024-13287Views SVG Animation - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-051
- CVE-2024-13286SVG Embed - Moderately critical - Cross site scripting - SA-CONTRIB-2024-050
- CVE-2024-13285wkhtmltopdf - Highly critical - Unsupported - SA-CONTRIB-2024-049
- CVE-2024-13284Gutenberg - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-048
- CVE-2024-13283Facets - Critical - Cross Site Scripting - SA-CONTRIB-2024-047
- CVE-2024-13282Block permissions - Moderately critical - Access bypass - SA-CONTRIB-2024-046
- CVE-2024-13281Monster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045
- CVE-2024-13280Persistent Login - Moderately critical - Access bypass - SA-CONTRIB-2024-044