CVE-2025-31693

Medium CVSS: 6.6

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.

Vendor

Drupal

Product

Artificial Intelligence

CWE

CWE-78

Yayın Tarihi

2025-03-31 22:15:21

Güncelleme

2025-04-15 14:58:25

Source Identifier

mlhess@drupal.org

KEV Date Added

Kategoriler

CWE-78 Artificial Intelligence MEDIUM Drupal 2025

Referanslar

https://www.drupal.org/sa-contrib-2025-022

Benzer Kayıtlar

Medium

CVE-2025-13082

User Interface (UI) Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofin…

Low

CVE-2025-13083

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrec…

Medium

CVE-2025-13080

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Drupal core allows Forceful Browsing.This i…

Medium

CVE-2025-13081

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allow…

High

CVE-2025-48914

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Con…

High

CVE-2025-48915

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Con…