CVE-2019-6342 Drupal core - Critical - Access bypass - SA-CORE-2019-008

2020-05-2820:59:46

drupal

www.cve.org

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.0%

JSON

An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4.

CNA Affected

[
  {
    "product": "Drupal Core",
    "vendor": "Drupal",
    "versions": [
      {
        "status": "affected",
        "version": "Drupal 8 8.7.4"
      }
    ]
  }
]