Gravedad:Media Vulnerabilidad: SA-CORE-2020-002\/ SA-CORE-2020-003 Fecha de publicaci\u00f3n:\nMayo 22, 2020
\n\u00daltima revisi\u00f3n: Mayo 22, 2020
\nPortal: https:\/\/www.drupal.org\/<\/p>\n\n\n\n
Sistemas Afectados:<\/strong> I. Descripci\u00f3n<\/strong> II. Impacto<\/strong><\/p>\n\n\n\n Los sitios de Drupal que\nutilicen versiones anteriores del m\u00f3dulo jQuery 3.5.0, se ven afectadas con\nvulnerabilidades de tipo XSS (Cross-site scripting) que podr\u00edan ser utilizadas\npor un ciberdelincuente para ejecutar c\u00f3digo malicioso.<\/p>\n\n\n\n La segunda afectaci\u00f3n\ndetectada es en las versiones anteriores a Drupal 7.70 y podr\u00eda ser aprovechada\ncon intenciones maliciosas para redirigir a un usuario visitante de la p\u00e1gina a\nuna URL externa diferente.<\/p>\n\n\n\n III. Referencia a\nsoluciones, herramientas e informaci\u00f3n<\/p>\n\n\n\n Actualizar a las versiones correspondientes de\nDrupal, mediante su sitio web (https:\/\/www.drupal.org\/project\/drupal\/releases<\/a>)<\/p>\n\n\n\n Fuentes:<\/strong><\/p>\n\n\n\n Informaci\u00f3n de contacto<\/strong> Gravedad:Media Vulnerabilidad: SA-CORE-2020-002\/ SA-CORE-2020-003 Fecha de publicaci\u00f3n: Mayo 22, 2020 \u00daltima revisi\u00f3n: Mayo 22, 2020 Portal: https:\/\/www.drupal.org\/ Sistemas Afectados: Vulnerabilidades de seguridad que afectan a todas las versiones anteriores de Drupal 8.8.6, Drupal 8.7.14, Drupal…<\/p>\n","protected":false},"author":4,"featured_media":941,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-2108","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/2108","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2108"}],"version-history":[{"count":1,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/2108\/revisions"}],"predecessor-version":[{"id":2109,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/2108\/revisions\/2109"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/941"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2108"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2108"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2108"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nVulnerabilidades de seguridad que afectan a todas las versiones anteriores de Drupal\n8.8.6, Drupal 8.7.14, Drupal 7.70. <\/p>\n\n\n\n
\nActualizaci\u00f3n de seguridad que afecta al n\u00facleo del gestor de contenidos y que\nsoluciona dos vulnerabilidades.<\/p>\n\n\n\n
\nCSIRT PANAMA
\nComputer Security Incident Response Team Autoridad Nacional para la Innovacion\nGubernamental
\nE-Mail: info@cert.pa
\nPhone: +507 520-CERT (2378)
\nWeb: https:\/\/cert.pa
\nTwitter: @CSIRTPanama
\nKey ID: 16F2B124<\/p>\n","protected":false},"excerpt":{"rendered":"