Security Alert (A23-09-18): Vulnerability in Drupal

Description:

Drupal has released a security advisory to address a vulnerability in the Drupal products. The details of security update can be found at:
https://www.drupal.org/sa-core-2023-006

Affected Systems:

• Drupal version 9.5.x
• Drupal version 10.0.x
• Drupal version 10.1.x

For detailed information of the affected products, please refer to the sections "Affected versions" and "Description" of corresponding security advisory at vendor's website.

Impact:

Successful exploitation could lead to privilege escalation on an affected system.

Recommendation:

The product vendor has released patches to address the issue.

Drupal 9.5.11
https://www.drupal.org/project/drupal/releases/9.5.11

Drupal 10.0.11
https://www.drupal.org/project/drupal/releases/10.0.11

Drupal 10.1.4
https://www.drupal.org/project/drupal/releases/10.1.4

If the patches cannot be applied immediately, administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://www.drupal.org/sa-core-2023-006
• https://www.drupal.org/about/core/policies/core-release-cycles/schedule