Skip to main content

Drupal Core Multiple Vulnerabilities

Release Date: 22 Jul 2022 4101 Views

RISK: Medium Risk

TYPE: Servers - Internet App Servers

TYPE: Internet App Servers

Multiple vulnerabilities were identified in Drupal Core. A remote attacker could exploit some of these vulnerabilities to trigger information disclosure, remote code execution, cross-site scripting and security restriction bypass on the targeted system.


Impact

  • Information Disclosure
  • Remote Code Execution
  • Security Restriction Bypass
  • Cross-Site Scripting

System / Technologies affected

  • Versions prior to Drupal 7.91
  • Drupal Version 8.x
  • Versions prior to Drupal 9.3.19
  • Versions prior to Drupal 9.4.3

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 


Vulnerability Identifier


Source


Related Link