NewApp Monitoring is liveSign up free
AgentbeamBeta
Open-source package vulnerability · Composer (PHP)

CVE-2019-6342: Drupal Improper Access Control

criticalCVSS 3.1 9.8GHSA-xq62-62c9-22mg

An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4.

Published Jan 11, 2024 · Updated Feb 5, 2024

Affected packages

drupal/core

Ecosystem
Composer (PHP)
Affected
> 8.7.3, < 8.7.5
Fixed in
8.7.5
Check
composer show drupal/core

drupal/drupal

Ecosystem
Composer (PHP)
Affected
> 8.7.3, < 8.7.5
Fixed in
8.7.5
Check
composer show drupal/drupal

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Composer (PHP) vulnerabilities

All Composer (PHP) entries