Drupal

NewsSecurity Vulnerabilities

Drupal Out-of-band security update addresses two vulnerabilities in the third-party library Guzzle [CVE-2022-31042 and CVE-2022-31043]

Duncan 1874 Views 0 Comments ,  ,  ,  ,  1 min read

CVE numbers = CVE-2022-31042 and CVE-2022-31043 Drupal uses the third-party Guzzle library for handling HTTP requests and responses to external

Read More
NewsSecurity Vulnerabilities

Drupal releases security update to addresses a vulnerability in the third-party library Guzzle [CVE-2022-29248]

Luke Simmonds 1531 Views 0 Comments ,  ,  0 min read

Drupal uses the third-party Guzzle library for handling HTTP requests and responses to external services. Guzzle has released a security update which

Read More
NewsSecurity Vulnerabilities

Drupal – Critical Arbitrary PHP code execution Vulnerability

Duncan 2421 Views 0 Comments ,  ,  ,  ,  0 min read

The Drupal project uses the PEAR Archive_Tar library. The PEAR Archive_Tar library has released a security update that impacts Drupal.

Read More
NewsSecurity Vulnerabilities

Drupal Releases Security Updates – Third-party library CKEditor

Duncan 3124 Views 0 Comments ,  ,  1 min read

The Drupal project uses the third-party library CKEditor, which has released a security improvement that is needed to protect some Drupal configurations. Vulnerabilities

Read More
NewsSecurity Vulnerabilities

Drupal File Module Cross-Site Scripting Vulnerability [CVE-2019-6341]

Duncan 2887 Views 0 Comments ,  ,  1 min read

CVE Number – CVE-2019-6341 A vulnerability in File module/subsystem of Drupal could allow an authenticated, remote attacker to conduct a cross-site scripting

Read More
NewsSecurity Vulnerabilities

Drupal EU Cookie Compliance module cross-site scripting vulnerability

Duncan 2924 Views 0 Comments ,  1 min read

This module addresses the General Data Protection Regulation (GDPR) that came into effect 25th May 2018, and the EU Directive

Read More
NewsSecurity Vulnerabilities

Drupal PHP built-in phar Stream Wrapper Remote Code Execution Vulnerability [CVE-2019-6339]

Duncan 2387 Views 0 Comments ,  ,  1 min read

CVE Number – CVE-2019-6339 A vulnerability in the PHP built-in phar stream wrapper used in Drupal could allow an authenticated, remote attacker

Read More
NewsSecurity Vulnerabilities

Drupal core PEAR Archive_Tar Library Vulnerability [CVE-2019-6338]

Duncan 2189 Views 0 Comments ,  1 min read

CVE Number – CVE-2019-6338 A vulnerability in the Drupal core PEAR Archive_Tar library of Drupal Core could allow an authenticated, remote attacker

Read More
NewsSecurity News

New Attacks Targeting Drupal Websites

Duncan 2154 Views 0 Comments 1 min read

A new attack methodology has been identified which involves the Dirty COW and Drupalgeddon 2 vulnerabilities present in unpatched Drupal

Read More
NewsSecurity Vulnerabilities

Drupal Remote Code Execution Vulnerability [CVE-2018-7602]

Duncan 2237 Views 0 Comments ,  1 min read

A vulnerability in multiple subsystems of Drupal could allow an authenticated, remote attacker to execute arbitrary code on a targeted

Read More