Security Alert (A22-04-22): Multiple Vulnerabilities in Drupal

Description:

Drupal has released security advisories to address multiple vulnerabilities in the Drupal products. The list of security updates can be found at:

• This link will open in a new windowhttps://www.drupal.org/sa-core-2022-008
• This link will open in a new windowhttps://www.drupal.org/sa-core-2022-009

Please note that Drupal 9 prior to version 9.2.x have reached End-Of-Life (EOL). No security updates will be provided after that. Users should arrange upgrading the Drupal to supported versions or migrating to other supported technology.

Affected Systems:

• Drupal version 9.2.x
• Drupal version 9.3.x

Impact:

Successful exploitation could lead to information disclosure, security restriction bypass or tampering on an affected system.

Recommendation:

The product vendor has released patches to address the issues.

• Drupal 9.2.18
  This link will open in a new windowhttps://www.drupal.org/project/drupal/releases/9.2.18
• Drupal 9.3.12
  This link will open in a new windowhttps://www.drupal.org/project/drupal/releases/9.3.12

More Information:

• This link will open in a new windowhttps://www.drupal.org/sa-core-2022-008
• This link will open in a new windowhttps://www.drupal.org/sa-core-2022-009
• This link will open in a new windowhttps://www.drupal.org/about/core/policies/core-release-cycles/schedule
• This link will open in a new windowhttps://www.cisa.gov/uscert/ncas/current-activity/2022/04/21/drupal-releases-security-updates