Miembros de
Boletines de Vulnerabilidades |
Drupal core - Critical - Cross Site Request Forgery - SA-CORE-2020-004 |
|
| Software afectado | Drupal |
|
Project: Drupal coreDate: 2020-June-17Security risk: Critical 15∕25 AC:Complex/A:None/CI:Some/II:Some/E:Theoretical/TD:AllVulnerability: Cross Site Request ForgeryCVE IDs: CVE-2020-13663Description: The Drupal core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities.Solution: If you are using Drupal 7.x, upgrade to Drupal 7.72.If you are using Drupal 8.8.x, upgrade to Drupal 8.8.8.If you are using Drupal 8.9.x, upgrade to More info: https://www.drupal.org/sa-core-2020-004 |
|
