未知CVE-2020-13671CISA KEV

Drupal core Un-restricted Upload of File

披露于 2026/10/20 · 更新于 2026/10/20

CVSS 评分—/ 10.0

EPSS 概率36.2%百分位 98.5%

KNOWN EXPLOITED VULNERABILITY

CISA KEV 处置信息

已确认在野利用

要求采取的措施

Apply updates per vendor instructions.

CISA 说明

https://nvd.nist.gov/vuln/detail/CVE-2020-13671

Improper sanitization in the extension file names is present in Drupal core.

暂无结构化产品信息。

Apply updates per vendor instructions.