Miembros de
Boletines de Vulnerabilidades |
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004 |
|
| Software afectado | Drupal |
|
Project: Drupal coreDate: 2025-March-19Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:DefaultVulnerability: Cross Site ScriptingAffected versions: >= 8.0.0 = 10.4.0 = 11.0.0 = 11.1.0 CVE IDs: CVE-2025-31675Description: Drupal core Link field attributes are not sufficiently sanitized, which can lead to a Cross Site Scripting vulnerability (XSS).This vulnerability is mitigated by that fact that an attacker would need to have the ability to More info: https://www.drupal.org/sa-core-2025-004 |
|
