Skip to main content

Drupal Multiple Vulnerabilities

Last Update Date: 17 Sep 2020 10:27 Release Date: 17 Sep 2020 4589 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

TYPE: Other Servers

Multiple vulnerabilities have been identified in Drupal. A remote user can exploit these vulnerabilities to trigger security restriction bypass, and sensitive information disclosure on the targeted system.


Impact

  • Security Restriction Bypass
  • Information Disclosure

System / Technologies affected

  • Drupal 8.7.x and earlier versions
  • Drupal 8.8.x
  • Drupal 8.9.x
  • Drupal 9.0.x

Solutions

Before installation of the software, please visit the vendor web-site for more details.
 

      Update to

  • 8.7.x and earlier versions : 8.8.10
  • 8.8.x: 8.8.10
  • 8.9.x: 8.9.6
  • 9.0.x: 9.0.6

Vulnerability Identifier


Source


Related Link