Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-11942

Fixed upstream EPSS <1%CVSS 5.9

A vulnerability in Drupal Core allows File Manipulation.This issue affects Drupal Core: from 10.0.0 before 10.2.10.

Published 2024-12-05 · CVE record · OSV

Products: Drupal Core

Fixed upstream

EcosystemPackageFixed in
Packagistdrupal/core10.2.10

Distro releases

ReleasePackageFixed in
Ubuntu Pro 14.04 LTSdrupal7no fix
Ubuntu Pro 16.04 LTSdrupal7no fix