Security Alert (A23-04-15): Vulnerability in Drupal


 

Published on: 20 April 2023

  
  

Description:

Drupal has released security advisories to address a vulnerability in the Drupal products. The details of security update can be found at:
https://www.drupal.org/sa-core-2023-005

 

Affected Systems:

  • Drupal version 7.x
  • Drupal version 9.4.x
  • Drupal version 9.5.x
  • Drupal version 10.0.x

Please note that Drupal 8 and Drupal 9 prior to version 9.4.x have reached End-Of-Life (EOL). No security updates will be provided after that. Users should arrange upgrading the Drupal to supported versions or migrating to other supported technology.

 

Impact:

Successful exploitation could lead to information disclosure on an affected system.

 

Recommendation:

The product vendor has released patches to address the issues.

Drupal 7.96
https://www.drupal.org/project/drupal/releases/7.96

Drupal 9.4.14
https://www.drupal.org/project/drupal/releases/9.4.14

Drupal 9.5.8
https://www.drupal.org/project/drupal/releases/9.5.8

Drupal 10.0.8
https://www.drupal.org/project/drupal/releases/10.0.8

 

More Information:

  • https://www.drupal.org/sa-core-2023-005
  • https://www.drupal.org/about/core/policies/core-release-cycles/schedule


Tag: Drupal
Tags