CVE-2018-25002

uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024

published December 31, 2020

CVSS
—
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal's security advisory policy.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01485 · 73.8th percentile
Published
2020-12-31T23:27Z
EPSS history
Timeline
  • 31 DEC 23:27Z
    uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024
    cvelistv5