Drupal Releases Security Updates

Threat ID:: CC-3678
Threat Severity:: Information only
Published:: 24 November 2020 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

Versions: all 7.x prior to 7.74, all 8.8.x prior to 8.8.1.1, all 8.9.x prior to 8.9.9, all 9.0.x prior to 9.0.8

Drupal

Threat details

Introduction

Drupal has released security updates to address a critical vulnerability in Drupal 7, 8.8 and earlier, 8.9, and 9.0. An attacker could exploit this vulnerability to take control of an affected system.

Remediation advice

Affected organisations are encouraged to review Drupal advisory SA-CORE-2020-012 and apply the relevant updates.

Last edited: 24 November 2020 11:50 am