# DRUPAL-CONTRIB-2020-035 - The File Example submodule within the Examples project does not properly sanitize certain…

Source: https://junglewise.ai/threats/drupal-contrib-2020-035-the-file-example-submodule-within-the-examples-d1bfba72  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2020-11-18  
License: CC BY 4.0 with a link back

Severity: info · Published 2020-11-18

The File Example submodule within the Examples project does not properly sanitize certain filenames as described in [SA-CORE-2020-012](https://www.drupal.org/sa-core-2020-012), along with other related vulnerabilities.

Therefore, File Example so is being removed from Examples until a version demonstrating file security best practices can added back in the future.

Technologies: [Packagist:Https://Packages.Drupal.Org/8 Drupal/Examples](https://junglewise.ai/threats/technologies/drupal-examples). Vendors: [Packagist:Https://Packages.Drupal.Org/8](https://junglewise.ai/threats/vendors/packagist-https-packages-drupal-org-8).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** Informational severity, published 18 November 2020.

**Which products and versions are affected?** Packagist:Https://Packages.Drupal.Org/8 Drupal/Examples ECOSYSTEM:introduced=1.0.0,last_affected=1.0.0|ECOSYSTEM:introduced=3.0.0,last_affected=3.0.0|ECOSYSTEM:introduced=3.0.1,last_affected=3.0.1.

**Is there a fix for This vulnerability?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected?** Check whether you run Packagist:Https://Packages.Drupal.Org/8 Drupal/Examples at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Packagist:Https://Packages.Drupal.Org/8 Drupal/Examples ECOSYSTEM:introduced=1.0.0,last_affected=1.0.0|ECOSYSTEM:introduced=3.0.0,last_affected=3.0.0|ECOSYSTEM:introduced=3.0.1,last_affected=3.0.1

## Related threats

- [Drupal Examples for Developers email_example arbitrary email sending](https://junglewise.ai/threats/cve-2026-107312-drupal-contrib-2026-215-the-examples-for-developers-project-aims)
- [Drupal Examples for Developers missing authorization in file_example submodule](https://junglewise.ai/threats/cve-2026-11909-drupal-examples-for-developers-missing-authorization-in-file)