DRUPAL-CONTRIB-2019-060

This module provides an autocomplete widget for text fields that suggests all existing previously entered values for that field. The module doesn't sufficiently check for proper access permission before returning autocomplete results. This vulnerability is mitigated by the fact that an attacker...

DRUPAL-CONTRIB-2019-058

This module enables you to customize meta tags to help with a site's search engine ranking and improve the display of page summaries when shared on social networks. The module doesn't sufficiently check for a site being in maintenance mode. This vulnerability is mitigated by the fact that the sit...

Facebook Messenger Customer Chat Plugin - Critical - Access bypass - SA-CONTRIB-2019-059

The Facebook Messenger Customer Chat Plugin module enables you to add the Facebook Messenger Customer Chat Plugin to your Drupal site. The module doesn't require user permissions on the admin page...

Drupal 8.7.4 Access Bypass Vulnerability (SA-CORE-2019-008) (drupal-2019-07-17)

According to its self-reported version, the instance of Drupal running on the remote web server is 8.7.4. It is, therefore, affected by an access bypass condition when the experimental Workspaces module is enabled. Note this vulnerability does not affect any release other than Drupal 8.7.4. Drupa...

Drupal 8.7.4 Access Bypass Vulnerability

According to its self-reported version, the instance of Drupal running on the remote web server is 8.7.4. It is, therefore, affected by an access bypass vulnerability when the experimental Workspaces module is enabled. Note that the scanner has not tested for these issues but has instead relied...

FreeBSD : drupal -- Drupal core - Access bypass (19d648e0-ab69-11e9-bfef-000ffec0b3e1)

Drupal Security Team reports : In Drupal 8.7.4, when the experimental Workspaces module is enabled, an access bypass condition is created. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4. C Tenable Network Security, Inc. The...

Drupal Access Bypass Vulnerability (CNVD-2019-26798)

Drupal is an open source content management system developed by the Drupal community using the PHP language. A security vulnerability exists in Drupal 8.7.4. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

Drupal Access Bypass Vulnerability (SA-CORE-2019-008) - Linux

In Drupal 8.7.4, when the experimental Workspaces module is enabled, an access bypass condition is created. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Drupal Access Bypass Vulnerability (SA-CORE-2019-008) - Windows

In Drupal 8.7.4, when the experimental Workspaces module is enabled, an access bypass condition is created. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

DRUPAL-CORE-2019-008

In Drupal 8.7.4, when the experimental Workspaces module is enabled, an access bypass condition is created. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4. Drupal 8.7.3 and earlier, Drupal 8.6.x and earlier, and Drupal 7.x are not...

Drupal Releases Security Update

Drupal has released a security update to address a vulnerability in Drupal Core. An attacker could exploit this vulnerability to take control of an affected website. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review Drupal’s security advisory...

Meta tags quick - Moderately critical - Cross Site Scripting - SA-CONTRIB-2019-057

Metatags quick is a module that manages meta tags tags that appear in HTML's head section as Drupal 7 fields. Administration page of metatags quick does not sanitize the output of blocks that appear on the same page. This allows an attacker to inject malicious JavaScript in block markup. This...

Drupal core - Critical - Access bypass - SA-CORE-2019-008

In Drupal 8.7.4, when the experimental Workspaces module is enabled, an access bypass condition is created. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4. Drupal 8.7.3 and earlier, Drupal 8.6.x and earlier, and Drupal 7.x are not...

drupal -- Drupal core - Access bypass

Drupal Security Team reports: In Drupal 8.7.4, when the experimental Workspaces module is enabled, an access bypass condition is created. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4...

Critical - Access bypass

More info at https://www.drupal.org/sa-core-2019-008...

Critical - Access bypass

More info at https://www.drupal.org/sa-core-2019-008...

DRUPAL-CONTRIB-2019-055

This module enables you to add and manage additional custom permissions through the administration UI. The module doesn't sufficiently check for the proper access permissions to this page. This vulnerability is mitigated by the fact that an attacker must know the route of the Custom Permissions...

Fedora Update for drupal7-uuid FEDORA-2019-a872068cd3

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 29 Update: drupal7-uuid-1.3-1.fc29

This module provides an API for adding universally unique identifiers UUID to Drupal objects, most notably entities. This package provides the following Drupal modules: uuid uuidpath uuidservices uuidservicesexample...

[SECURITY] Fedora 30 Update: drupal7-uuid-1.3-1.fc30

This module provides an API for adding universally unique identifiers UUID to Drupal objects, most notably entities. This package provides the following Drupal modules: uuid uuidpath uuidservices uuidservicesexample...