Miembros de
Boletines de Vulnerabilidades |
Drupal core - Critical - Cross-site scripting - SA-CORE-2021-002 |
|
Información sobre el sistema |
|
| Software afectado | Drupal |
Descripción |
|
|
Project: Drupal coreDate: 2021-April-21Security risk: Critical 15∕25 AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:DefaultVulnerability: Cross-site scriptingDescription: Drupal cores sanitization API fails to properly filter cross-site scripting under certain circumstances.Not all sites and users are affected, but configuration changes to prevent the exploit might be impractical and will vary between sites. Therefore, we recommend all sites update to this release as soon as More info: https://www.drupal.org/sa-core-2021-002 |
|
Identificadores estándar |
|
| Propiedad | Valor |
| CVE | |
Histórico de versiones |
||
| Versión | Comentario | Fecha |
| 1.0 | Advisory issued | 2021-04-22 |