Miembros de
Boletines de Vulnerabilidades |
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003 |
|
| Software afectado | Drupal |
|
Project: Drupal coreDate: 2024-November-20Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:DefaultVulnerability: Cross Site ScriptingAffected versions: >= 8.8.0 = 10.3.0 = 11.0.0 Description: Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized.Solution: Install the latest version:If you are using Drupal 10.2, update to Drupal 10.2.11.If you More info: https://www.drupal.org/sa-core-2024-003 |
|
