Drupal Releases Security Updates

Threat ID:: CC-3732
Threat Severity:: Information only
Published:: 26 January 2021 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

Versions: all prior to 8.9.13

Drupal 8

Versions: all prior to 7.78

Drupal 7

The following platforms are also known to be affected:

Drupal 9 Versions: all prior to 9.1.3

Threat details

Introduction

Drupal has released security updates to address a vulnerability affecting Drupal. An attacker could exploit this vulnerability to take control of an affected system.

Remediation advice

Organisations are encouraged to review Drupal Advisory SA-CORE-2021-001 and apply the necessary updates or mitigations.

Last edited: 26 January 2021 1:20 pm