## Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005

- 種別: advisory
- 重大度: critical
- 関連技術: drupal, php
- CVE: CVE-2024-55635
- 公開日時: 2024-11-20T17:24:02.000Z
- 情報源: Drupal Security Advisories (https://www.drupal.org/sa-core-2024-005)
- パーマリンク: https://vulnpulse.app/items/drupal-security-9af4e9341a47

Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Critical 17 ∕ 25 AC:None/A:None/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Cross Site Scripting Affected versions: >=7.0 <7.102 CVE IDs: CVE-2024-55635 Description: Drupal 7 core's Overlay module doesn't safely handle user input, leading to reflected cross-site scripting under certain circumstances. Only sites with the Overlay module enabled are affected by this vulnerability. Solution: Install the latest version: If you are using Drupal 7, update to Drupal 7.102 Sites may also disable the Ove…