Web application abuses : Drupal 7.x and 8.x Multiple Vulnerabilities (SA-CORE-2019-012) (Linux)

Anfälligkeitssuche		Suche in 219043 CVE Beschreibungen und 99761 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.143282

Kategorie: Web application abuses

Titel: Drupal 7.x and 8.x Multiple Vulnerabilities (SA-CORE-2019-012) (Linux)

Zusammenfassung: Drupal is prone to multiple vulnerabilities in the third-party library; Archive_Tar.

Beschreibung: Summary:
Drupal is prone to multiple vulnerabilities in the third-party library
Archive_Tar.

Vulnerability Insight:
Multiple vulnerabilities are possible if Drupal is configured to allow .tar,
.tar.gz, .bz2 or .tlz file uploads and processes them.

Affected Software/OS:
Drupal 7.x, 8.7.x and earlier and 8.8.x.

Solution:
Update to version 7.69, 8.7.11, 8.8.1 or later.

CVSS Score:
8.5

CVSS Vector:
AV:N/AC:L/Au:S/C:C/I:C/A:N

Copyright Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.143282
Kategorie:	Web application abuses
Titel:	Drupal 7.x and 8.x Multiple Vulnerabilities (SA-CORE-2019-012) (Linux)
Zusammenfassung:	Drupal is prone to multiple vulnerabilities in the third-party library; Archive_Tar.
Beschreibung:	Summary: Drupal is prone to multiple vulnerabilities in the third-party library Archive_Tar. Vulnerability Insight: Multiple vulnerabilities are possible if Drupal is configured to allow .tar, .tar.gz, .bz2 or .tlz file uploads and processes them. Affected Software/OS: Drupal 7.x, 8.7.x and earlier and 8.8.x. Solution: Update to version 7.69, 8.7.11, 8.8.1 or later. CVSS Score: 8.5 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:N
Copyright	Copyright (C) 2019 Greenbone Networks GmbH