{"cvss":0.0,"datePublished":"2022-01-18","dateUpdated":"2022-01-18","description":"Improper sanitization in the extension file names is present in Drupal core.","dueDate":"2022-07-18","id":"CVE-2020-13671","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-13671","product":"Drupal core","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"Drupal core Un-restricted Upload of File","vendor":"Drupal"}