CVE-2024-11942: Drupal

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability in Drupal Core allows File Manipulation.This issue affects Drupal Core: from 10.0.0 before 10.2.10.

Affected products

• Drupal Drupal: from 10.0.0, before 10.2.10 (fixed in 10.2.10)

Published 2024-12-05. Last modified 2026-06-17.