Language:
https://www.drupal.org/sa-core-2024-008
https://www.drupal.org/project/drupal/releases/10.2.11
https://www.drupal.org/project/drupal/releases/10.3.9
https://www.drupal.org/project/drupal/releases/7.102
https://www.drupal.org/psa-2021-06-29
https://www.drupal.org/psa-2023-11-01
https://www.drupal.org/sa-core-2024-007
https://www.drupal.org/project/drupal/releases/11.0.8
https://www.drupal.org/sa-core-2024-006
https://www.drupal.org/sa-core-2024-005
https://www.drupal.org/sa-core-2024-004
Severity: Critical
ID: 211656
File Name: drupal_11_0_8.nasl
Version: 1.4
Type: remote
Family: CGI abuses
Published: 11/20/2024
Updated: 12/13/2024
Configuration: Enable paranoid mode, Enable thorough checks
Supported Sensors: Nessus
Risk Factor: Medium
Score: 6.7
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2024-55637
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS Score Source: CVE-2024-55638
CPE: cpe:/a:drupal:drupal
Required KB Items: Settings/ParanoidReport, installed_sw/Drupal
Exploit Ease: No known exploits are available
Patch Publication Date: 11/20/2024
Vulnerability Publication Date: 11/20/2024
CVE: CVE-2024-12393, CVE-2024-55634, CVE-2024-55635, CVE-2024-55636, CVE-2024-55637, CVE-2024-55638
IAVA: 2024-A-0797