Drupal Alert
2935Warning Date
Severity Level
Warning Number
Target Sector
29 September, 2022
● Critical
2022-5288
All
Drupal has released security updates to address multiple vulnerabilities in the following products:
- S3 File System
- Drupal core >= 8.0.0 <9.3.22 || >= 9.4.0 <9.4.7
Attacker could exploit these vulnerabilities by doing the following:
- Unauthorized disclosure of information
- Unauthorized modification
- Bypass of a protection mechanism
The CERT team encourages users to update the affected versions and to review Drupal security advisory: