Access Bypass

A single advisory window can demand upgrades, removals, and tighter environment controls. The correct response depends on support status and exposure conditions, not the severity label alone. ...more

Drupal has issued security updates to fix critical and moderately critical vulnerabilities, including a cross-site scripting flaw, access bypass risks, and a PHP object injection issue. Administrators are urged to update their systems immediately to protect against potential exploits. ...more

Maxime Topolov, CEO, Code.Store calls for a shake-up in Drupal's future in his latest blog, 'Dries in Lille: Storytelling or Escapism for Drupal’s Challenges?' Read about his vision for a revamped Drupal. ...more

The Drupal Security Team announced on March 9th, 2022 a moderately critical access bypass vulnerability in Opigno Learning path SA-CONTRIB-20220-029. ...more

Drupal Security team announces a moderately critical access bypass vulnerability SA-CONTRIB-2022-023 in the Fancy File Delete Module on February 9th 2022. ...more

Critical Access bypass, Information Disclosure, and Multiple Vulnerabilities in the Private Taxonomy Terms module SA-CONTRIB-2022-014 was announced on January 26th, 2022 ...more