Security Alert (A23-01-12): Vulnerability in Drupal

Description:

Drupal has released a security advisory to address a vulnerability in the Drupal products. The list of security update can be found at:
https://www.drupal.org/sa-core-2023-001

Affected Systems:

• Drupal version 9.4.x
• Drupal version 9.5.x
• Drupal version 10.0.x

Please note that Drupal 8 and Drupal 9 prior to version 9.4.x have reached End-Of-Life (EOL). No security updates will be provided after that. Users should arrange upgrading the Drupal to supported versions or migrating to other supported technology.

Impact:

Successful exploitation could lead to information disclosure on an affected system.

Recommendation:

The product vendor has released patches to address the issues.

Drupal 9.4.10
https://www.drupal.org/project/drupal/releases/9.4.10

Drupal 9.5.2
https://www.drupal.org/project/drupal/releases/9.5.2

Drupal 10.0.2
https://www.drupal.org/project/drupal/releases/10.0.2

More Information:

• https://www.drupal.org/sa-core-2023-001
• https://www.drupal.org/about/core/policies/core-release-cycles/schedule