Security Alert (A23-01-12): Vulnerability in Drupal


 

Published on: 19 January 2023

  
  

Description:

Drupal has released a security advisory to address a vulnerability in the Drupal products. The list of security update can be found at:
https://www.drupal.org/sa-core-2023-001

 

Affected Systems:

  • Drupal version 9.4.x
  • Drupal version 9.5.x
  • Drupal version 10.0.x

Please note that Drupal 8 and Drupal 9 prior to version 9.4.x have reached End-Of-Life (EOL). No security updates will be provided after that. Users should arrange upgrading the Drupal to supported versions or migrating to other supported technology.

 

Impact:

Successful exploitation could lead to information disclosure on an affected system.

 

Recommendation:

The product vendor has released patches to address the issues.

Drupal 9.4.10
https://www.drupal.org/project/drupal/releases/9.4.10

Drupal 9.5.2
https://www.drupal.org/project/drupal/releases/9.5.2

Drupal 10.0.2
https://www.drupal.org/project/drupal/releases/10.0.2

 

More Information:

  • https://www.drupal.org/sa-core-2023-001
  • https://www.drupal.org/about/core/policies/core-release-cycles/schedule


Tag: Drupal
Tags