Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2019-6341
HistoryMar 26, 2019 - 6:29 p.m.

CVE-2019-6341

2019-03-2618:29:00
Debian Security Bug Tracker
security-tracker.debian.org
9

0.682 Medium

EPSS

Percentile

98.0%

In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prior to 8.6.13;Drupal 8.5 versions prior to 8.5.14. Under certain circumstances the File module/subsystem allows a malicious user to upload a file that can trigger a cross-site scripting (XSS) vulnerability.

OSVersionArchitecturePackageVersionFilename
Debian9alldrupal7< 7.52-2+deb9u11drupal7_7.52-2+deb9u11_all.deb