GitHub Advisoryadvisory · Packagist

GHSA-v8wr-r69p-mmwx Unrestricted Upload of File with Dangerous Type in Drupal core

CRITICAL Published 2022-02-12 Modified 2022-02-23 Official page ↗
Aliases
CVE-2020-13675
Ecosystem
Packagist
Packages
drupal/core
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284, CWE-434
Reviewed
2022-02-23

Affected packages

• Packagist drupal/core: >= 8.0.0, < 8.9.19 → fixed in 8.9.19 • Packagist drupal/core: >= 9.1.0, < 9.1.13 → fixed in 9.1.13 • Packagist drupal/core: >= 9.2.0, < 9.2.6 → fixed in 9.2.6

Description

Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. The modules do not correctly run all file validation, which causes an access bypass vulnerability. An attacker might be able to upload files that bypass the file validation process implemented by modules on the site.

Related

Alias · CVE (1)

  • CVE-2020-13675 Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. vulnerability

Weakness · CWE (2)

  • CWE-284 Improper Access Control weakness
  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References