Security Team · Question 12 of 12
Which statements about handling vulnerabilities are correct?
3 answers are correct. Hard
Show answer
Answer
- A Bulletins are also published for unmaintained extensions with vulnerabilities
- C Vulnerabilities should not be made public before a fix exists
- D The Security Team aims to respond within two working days
Explanation
The team strives to respond within two working days and coordinates fix and bulletin. Unmaintained extensions with vulnerabilities are announced via bulletin and removed from the TER. There is no prior review of all extensions.