DeutschShown in its original language — a full translation is planned for a future version.
Drupal: Mehrere Schwachstellen
view advisory published 2019-04-17
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Daten zu manipulieren, um einen Denial of Service Zustand herbeizuführen und um beliebigen Code auszuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10911US | high7.5 | — | ||
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, a vulnerability would allow an attacker to authenticate as a privileged… | ||||
| CVE-2019-10910US | critical9.8 | — | ||
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection a… | ||||
| CVE-2019-10909US | medium5.4 | Exploit | ||
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user in… | ||||
| CVE-2019-11358US | medium6.1 | Exploit | ||
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source ob… | ||||
02
references
External citations — patches, advisories, analysis.
- SolarWinds Platform 2023.3 Release Notesexternal
- Juniper Security Advisory JSA11203 vom 2021-07-14external
- Oracle Linux Security Advisory ELSA-2022-7343 vom 2022-11-03external
- WID-SEC-W-2022-1948 - CSAF Versionself
- WID-SEC-2022-1948 - Portal Versionself
- Drupal Security Advisory sa-contrib-2019-044 vom 2019-04-17external
- Drupal Security Advisory sa-contrib-2019-045 vom 2019-04-17external
- Drupal Security Advisory sa-core-2019-005 vom 2019-04-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan