Drupal core vulnerable to improper error handling
The advisory, in context
Under certain uncommon site configurations, a bug in the CKEditor 5 module can cause some image uploads to move the entire webroot to a different location on the file system. This could be exploited by a malicious user to take down a site.
The issue is mitigated by the fact that several non-default site configurations must exist simultaneously for this to occur.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
From 10.0.0 before 10.2.10
Fixed in 10.2.10
37 explicitly affected versions
10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9, 10.1.0, 10.1.0-alpha1, 10.1.0-beta1, 10.1.0-rc1, 10.1.1, 10.1.2, 10.1.3, 10.1.4, 10.1.5, 10.1.6, 10.1.7, 10.1.8, 10.2.0, 10.2.0-alpha1, 10.2.0-beta1, 10.2.0-rc1, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5, 10.2.6, 10.2.7, 10.2.8, 10.2.9
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.2.10"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.0.1",
"10.0.10",
"10.0.11",
"10.0.2",
"10.0.3",
"10.0.4",
"10.0.5",
"10.0.6",
"10.0.7",
"10.0.8",
"10.0.9",
"10.1.0",
"10.1.0-alpha1",
"10.1.0-beta1",
"10.1.0-rc1",
"10.1.1",
"10.1.2",
"10.1.3",
"10.1.4",
"10.1.5",
"10.1.6",
"10.1.7",
"10.1.8",
"10.2.0",
"10.2.0-alpha1",
"10.2.0-beta1",
"10.2.0-rc1",
"10.2.1",
"10.2.2",
"10.2.3",
"10.2.4",
"10.2.5",
"10.2.6",
"10.2.7",
"10.2.8",
"10.2.9"
]
}From 10.0.0 before 10.2.10
Fixed in 10.2.10
37 explicitly affected versions
10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9, 10.1.0, 10.1.0-alpha1, 10.1.0-beta1, 10.1.0-rc1, 10.1.1, 10.1.2, 10.1.3, 10.1.4, 10.1.5, 10.1.6, 10.1.7, 10.1.8, 10.2.0, 10.2.0-alpha1, 10.2.0-beta1, 10.2.0-rc1, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5, 10.2.6, 10.2.7, 10.2.8, 10.2.9
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.2.10"
}
],
"type": "ECOSYSTEM",
"database_specific": {
"constraint": ">=10.0 < 10.2.10"
}
}
],
"versions": [
"10.0.0",
"10.0.1",
"10.0.10",
"10.0.11",
"10.0.2",
"10.0.3",
"10.0.4",
"10.0.5",
"10.0.6",
"10.0.7",
"10.0.8",
"10.0.9",
"10.1.0",
"10.1.0-alpha1",
"10.1.0-beta1",
"10.1.0-rc1",
"10.1.1",
"10.1.2",
"10.1.3",
"10.1.4",
"10.1.5",
"10.1.6",
"10.1.7",
"10.1.8",
"10.2.0",
"10.2.0-alpha1",
"10.2.0-beta1",
"10.2.0-rc1",
"10.2.1",
"10.2.2",
"10.2.3",
"10.2.4",
"10.2.5",
"10.2.6",
"10.2.7",
"10.2.8",
"10.2.9"
]
}