Drupal Updates
3114Warning Date
Severity Level
Warning Number
Target Sector
19 December, 2019
● High
2019-742
All
Description:
Drupal has released security updates to address multiple vulnerabilities in the following versions:
- Drupal 8.8.x
- Drupal 8.7.x
- Drupal 7.x
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Denial of service (DoS) attack.
- Bypass security restrictions.
- Upload malicious files to the system.
Best practice and Recommendations:
The CERT team encourages users to update the affected versions and to review Drupal security advisory: