Drupal Releases Security Updates

Drupal has released security updates to address vulnerabilities affecting Drupal 7, 8.7, and 8.8. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

Threat ID:: CC-3476
Category:
Threat Severity:: Information only
Threat Vector:
Published:: 28 May 2020 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Drupal has released security updates to address vulnerabilities affecting Drupal 7, 8.7, and 8.8. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

Affected platforms

The following platforms are known to be affected:

Drupal - Versions 8.8.5 / 8.7.13 / 7.69 and earlier

Remediation steps

Type	Step
	Users and administrators are encouraged to review Drupal advisories SA-CORE-2020-002 and SA-CORE-2020-003 for more information and to apply the necessary updates.

Last edited: 29 June 2021 12:01 pm