Miembros de
Boletines de Vulnerabilidades |
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001 |
|
| Software afectado | Drupal |
|
Project: Drupal coreDate: 2025-February-19Security risk: Critical 17 ∕ 25 AC:Basic/A:None/CI:Some/II:Some/E:Proof/TD:AllVulnerability: Cross site scriptingAffected versions: >= 8.0.0 = 10.4.0 = 11.0.0 = 11.1.0 CVE IDs: CVE-2025-3057Description: Drupal core doesnt sufficiently filter error messages under certain circumstances, leading to a reflected Cross Site Scripting vulnerability (XSS).Sites are encouraged to update. There are not yet public documented steps to exploit this, but More info: https://www.drupal.org/sa-core-2025-001 |
|
