CVE

CVE-2020-13671

Drupal core Un-restricted Upload of File

Drupal · Drupal core

Date added (CISA)

2022-01-18

Remediation due

2022-07-18

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Improper sanitization in the extension file names is present in Drupal core.