Drupal Releases Security Updates

Drupal has released security updates addressing vulnerabilities in Drupal 7.x, 8.5.x, and 8.6.x. A remote attacker could exploit these vulnerabilities to take control of an affected system.

Threat ID:: CC-2892
Category:
Threat Severity:: Low
Threat Vector:
Published:: 17 January 2019 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Drupal has released security updates addressing vulnerabilities in Drupal 7.x, 8.5.x, and 8.6.x. A remote attacker could exploit these vulnerabilities to take control of an affected system.

Affected platforms

The following platforms are known to be affected:

Drupal 7

Drupal - Versions 8.6x, 8.5x and 7.x

Drupal 8

Threat details

Remediation steps

Type	Step
	Users and administrators are encouraged to review Drupal’s security advisories SA-CORE-2019-001 and SA-CORE-2019-002 and apply the necessary updates.

Last edited: 14 February 2020 2:44 pm