drupal vulnerabilities (Bitnami)
72 vulnerabilities.
-
drupalBitnami Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009 5.4 Medium -
drupalBitnami Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008 3.1 Low -
drupalBitnami Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007 5.9 Medium -
drupalBitnami Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006 5.9 Medium -
drupalBitnami Drupal core - Critical - PHP object injection - SA-CORE-2026-005 5.9 Medium -
drupalBitnami Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003 6.1 Medium -
drupalBitnami Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008 3.7 Low -
drupalBitnami Drupal core - Moderately critical - Defacement - SA-CORE-2025-007 4.3 Medium -
drupalBitnami Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006 5.9 Medium -
drupalBitnami Mounted Kubernetes Secrets under a predictable path located within the web server document root 10.0 Critical -
drupalBitnami Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005 6.1 Medium -
drupalBitnami Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002 5.9 Medium -
drupalBitnami Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 9.8 Critical -
drupalBitnami Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002 6.6 Medium -
drupalBitnami Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001 6.1 Medium -
drupalBitnami Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004 5.4 Medium -
drupalBitnami Drupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003 7.5 High -
drupalBitnami Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002 4.6 Medium -
drupalBitnami Drupal core - Critical - Cross site scripting - SA-CORE-2025-001 6.1 Medium -
drupalBitnami Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005 5.3 Medium -
drupalBitnami Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008 9.8 Critical -
drupalBitnami Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007 9.8 Critical -
drupalBitnami Drupal core - Less critical - Gadget chain - SA-CORE-2024-006 9.8 Critical -
drupalBitnami Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004 8.1 High -
drupalBitnami Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003 5.4 Medium -
drupalBitnami Drupal core - Moderately critical - Denial of Service - SA-CORE-2024-001 7.5 High -
drupalBitnami Drupal Denial of Service vulnerability 7.5 High -
drupalBitnami Drupal core - Critical - Cache poisoning - SA-CORE-2023-006 7.5 High -
drupalBitnami Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005 6.5 Medium -
drupalBitnami Twig may load a template outside a configured directory when using the filesystem loader 7.5 High -
drupalBitnami Lack of domain validation in Druple core 6.1 Medium -
drupalBitnami Drupal core arbitrary PHP code execution 7.2 High -
drupalBitnami Drupal core Denial of Service vulnerability 6.5 Medium -
drupalBitnami Drupal core Denial of Service vulnerability 7.5 High -
drupalBitnami Fix failure to strip Authorization header on HTTP downgrade in Guzzle 7.5 High -
drupalBitnami Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle 7.5 High -
drupalBitnami Cross-domain cookie leakage in Guzzle 8.0 High -
drupalBitnami Access bypass in Drupal core 5.4 Medium -
drupalBitnami Drupal core Denial of Service vulnerability 7.5 High -
drupalBitnami Improper Input Validation in guzzlehttp/psr7 7.5 High -
drupalBitnami Regular expression Denial of Service in dialog plugin 6.5 Medium -
drupalBitnami Cross-site Scripting in CKEditor4 5.4 Medium -
drupalBitnami Drupal core Denial of Service vulnerability 6.5 Medium -
drupalBitnami Drupal core Denial of Service vulnerability 7.5 High -
drupalBitnami Access bypass in Drupal Core 8/9 6.1 Medium -
drupalBitnami HTML comments vulnerability allowing to execute JavaScript code 8.2 High -
drupalBitnami Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML 8.2 High -
drupalBitnami XSS in the `of` option of the `.position()` util 6.5 Medium -
drupalBitnami XSS in `*Text` options of the Datepicker widget 6.5 Medium -
drupalBitnami XSS in the `altField` option of the Datepicker widget 6.5 Medium - Show olderLoading…