File Extension Bypass Vulnerability in Drupal by Acquia

CVE-2024-13311

Summary

A security vulnerability exists in Drupal that allows unrestricted file extensions for file fields, potentially enabling unauthorized file uploads. This flaw could result in users being able to upload malicious files that could compromise the integrity of the application. It is critical to monitor and restrict file upload capabilities to maintain the security posture of the Drupal platform. For more details, refer to the announcement on the official Drupal security page.

References