Drupal Releases Security Updates

Drupal has released security updates to address vulnerabilities affecting Drupal 8.7.x and 8.8.x. An attacker could exploit these vulnerabilities to take control of an affected system.

Threat ID:: CC-3402
Category:
Threat Severity:: Information only
Threat Vector:
Published:: 25 March 2020 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Drupal has released security updates to address vulnerabilities affecting Drupal 8.7.x and 8.8.x. An attacker could exploit these vulnerabilities to take control of an affected system.

Affected platforms

The following platforms are known to be affected:

Drupal 8

Drupal - Versions 8.8.x prior to 8.8.4, and 8.7.x prior to 8.7.12

Remediation steps

Type	Step
	Users and administrators are encouraged to review the Drupal security release and apply the necessary updates or mitigations.

Last edited: 29 June 2021 12:01 pm