https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T19:54:45.392118+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2017-avi-192 certfr-2017-avi-192 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Drupal</span>. Elles permettent à un attaquant… 2026-10-09T19:54:45.505649+00:00 certfr-2017-avi-192 https://cve.radiocsirt.org/vuln/cnvd-2017-13903 cnvd-2017-13903 2026-10-09T19:54:45.505695+00:00 cnvd-2017-13903 https://cve.radiocsirt.org/vuln/euvd-2026-170544 EUVD-2026-170544 2026-10-09T19:54:45.505712+00:00 EUVD-2026-170544 https://cve.radiocsirt.org/vuln/fkie_cve-2017-6921 fkie_cve-2017-6921 2026-10-09T19:54:45.505725+00:00

In Drupal 8 prior to 8.3.4; The file REST resource does not properly validate some fields when manipulating files. A site is only affected by this if the site has the RESTful Web Services (rest) module enabled, the file REST resource is enabled and allows PATCH requests, and an attacker can get or register a user account on the site with permissions to upload files and to modify the file resource.

 https://cve.radiocsirt.org/vuln/ghsa-h377-287m-w2r9 GHSA-h377-287m-w2r9 — Drupal file REST resource does not properly validate 2026-10-09T19:54:45.505754+00:00

Affected: Packagist: drupal/core, Packagist: drupal/drupal

In Drupal 8 prior to 8.3.4; The file REST resource does not properly validate some fields when manipulating files. A site is only affected by this if the site has the RESTful Web Services (rest) module enabled, the file REST resource is enabled and allows PATCH requests, and an attacker can get or register a user account on the site with permissions to upload files and to modify the file resource.

 https://cve.radiocsirt.org/vuln/gsd-2017-6921 gsd-2017-6921 2026-10-09T19:54:45.505781+00:00 gsd-2017-6921