0.003 Low
EPSS
Percentile
70.0%
drupal/drupal is vulnerable to authorization bypass. The vulnerability exists when the experimental Workspaces is enabled as Drupal does not properly check if the user owns the workspace.
Workspaces
github.com/drupal/drupal/commit/9f9d61a5dafd83e3bc9ba3fdf5180e15dec6e542
www.drupal.org/sa-core-2019-008