Description A vulnerability in Drupal Core allows File Manipulation.This issue affects Drupal Core: from 10.0.0 before 10.2.10. Remediation References CVE-2024-11942 Related Vulnerabilities Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-34626) phpMyFAQ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-34728) TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2025-47939) silverstripeCMS Other Vulnerability (CVE-2007-2321) Oracle JRE CVE-2013-2421 Vulnerability (CVE-2013-2421) Severity Medium Classification CVE-2024-11942 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities