Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Drupal Releases Security Updates

Drupal has released security updates addressing vulnerabilities in Drupal 7.x, 8.5.x, and 8.6.x. A remote attacker could exploit these vulnerabilities to take control of an affected system.

Threat ID:
CC-2892
Category:
Threat Severity:
Low
Threat Vector:
Published:
17 January 2019 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Drupal has released security updates addressing vulnerabilities in Drupal 7.x, 8.5.x, and 8.6.x. A remote attacker could exploit these vulnerabilities to take control of an affected system.

Affected platforms

The following platforms are known to be affected:

Drupal 7

Drupal - Versions 8.6x, 8.5x and 7.x

Drupal 8

Threat details

Remediation steps

Type Step

Users and administrators are encouraged to review Drupal’s security advisories SA-CORE-2019-001 and SA-CORE-2019-002 and apply the necessary updates.

Last edited: 14 February 2020 2:44 pm