3 ms·
The vulnerability also tracked as SA-CORE-2020-012, exists due to improper validation of filenames of files uploaded to Drupal websites. E.g. filename.php.txt
by axsharma 6y ago
The vulnerability also tracked as SA-CORE-2020-012, exists due to improper validation of filenames of files uploaded to Drupal websites.
E.g. filename.php.txt or filename.html.gif, without an underscore (_) in the extension.