CVE-2024-13311
CVE-2024-13311 · Allow All File Extensions for file fields - Critical - Unsupported - SA-CONTRIB-2024-075
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Vulnerability in Drupal Allow All File Extensions for file fields.This issue affects Allow All File Extensions for file fields: *.*.
CVSS 7.3 · High · EPSS 0.4%
- Published
- Updated
Stack: php
Affected products and versions
allow all file extensions for file fields
- Versions
- *.*: Affected (semver)
No fix published
drupal/all_extensions Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published