GHSA-xq62-62c9-22mg

ghsaUSosv

Drupal Improper Access Control

view advisory published 2024-01-11Licence: CC-BY-4.0

An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-6342US	critical9.8	2.20% (82nd)	—	2020-05-28
An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not aff…

references

External citations — patches, advisories, analysis.

https://github.com/drupal/corePACKAGE
https://github.com/drupal/core/commit/bac9bde22bb545ff72570d8a46055c6c6e70e7c5WEB
https://nvd.nist.gov/vuln/detail/CVE-2019-6342ADVISORY
https://www.drupal.org/sa-core-2019-008WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan