drupal7

Direct Vulnerabilities

Known vulnerabilities in the drupal7 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Cross-site Request Forgery (CSRF)	*
M Open Redirect	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improper Input Validation	*
L Improper Input Validation	*
M Deserialization of Untrusted Data	*
M Inclusion of Functionality from Untrusted Control Sphere	*
M Link Following	*
M Deserialization of Untrusted Data	<7.44-1ubuntu1~16.04.0+esm2
L Cross-site Scripting (XSS)	<7.44-1ubuntu1~16.04.0+esm3
H Cross-site Scripting (XSS)	<7.44-1ubuntu1~16.04.0+esm3
M Directory Traversal	*
M Incorrect Authorization	*
H Unrestricted Upload of File with Dangerous Type	<7.44-1ubuntu1~16.04.0+esm2
H Arbitrary Code Injection	<7.44-1ubuntu1~16.04.0+esm2
H CVE-2018-7602	<7.44-1ubuntu1~16.04.0+esm1
L Files or Directories Accessible to External Parties	*
H Improper Input Validation	<7.44-1ubuntu1~16.04.0+esm1
M Open Redirect	*
L Incorrect Permission Assignment for Critical Resource	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Information Exposure	*
M Open Redirect	*
M Access Restriction Bypass	*
L Cross-site Request Forgery (CSRF)	*