Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Drupal Releases Security Update

Drupal has released a security update to address a vulnerability in Drupal Core. A remote attacker could exploit this vulnerability to take control of an affected website.

Threat ID:
CC-3052
Category:
Threat Severity:
Medium
Threat Vector:
Published:
10 May 2019 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Drupal has released a security update to address a vulnerability in Drupal Core. A remote attacker could exploit this vulnerability to take control of an affected website.

Affected platforms

The following platforms are known to be affected:

Drupal

Drupal Core - Versions prior to 8.7.1, 8.6.16 or 7.67

Threat details

Remediation steps

Type Step

Users and administrators are encoruaged to review Drupal’s security advisory SA-CORE-2019-007 and apply the necessary updates.

Last edited: 14 February 2020 2:42 pm