Approved changes feed: RSS · Atom

cpe:2.3:a:sunhater:kcfinder:*:*:*:*:*:drupal:*:*

part: a version: * update: *

VendorSunhater (78962f52-87d2-54ec-b4d1-ef12c16c6309)
ProductKcfinder (b8f93ad1-3d35-5c12-b239-d1635b5fa830)
Edition*
Language*
Software edition*
Target softwaredrupal
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/sunhater/kcfinder purl2cpe 2026-06-01 10:17:47.596257
pkg:sourceforge/kcfinder purl2cpe 2026-06-01 10:17:47.596258

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25002 vulnerable 2026-06-08 05:11:29.119699 Details available
uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal's security advisory policy.
Published: 2020-12-31T23:27:52.000Z
Updated: 2024-08-05T12:26:39.587Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.