Vulnerabilities > Drupal > Drupal > 10.0.0

DATE CVE VULNERABILITY TITLE RISK
2023-09-28 CVE-2023-5256 Unspecified vulnerability in Drupal
In certain scenarios, Drupal's JSON:API module will output error backtraces.
network
high complexity
drupal
7.5
2023-04-26 CVE-2023-31250 Incorrect Authorization vulnerability in Drupal
The file download facility doesn't sufficiently sanitize file paths in certain situations.
network
low complexity
drupal CWE-863
6.5