Drupal Releases Security Advisory to Address Vulnerability in Drupal Core

News Cybersecurity English Guidance

Date: 21st Sep, 2023 Source: Cybersecurity and Infrastructure Security Agency Country: USA Original Source

Brief

Summary:

The United States government's America's Cyber Defense Agency has issued an alert on September 21, 2023, regarding a security vulnerability in multiple versions of Drupal. The vulnerability, addressed in security advisory SA-CORE-2023-006, allows a malicious actor to take control of an affected system. CISA recommends reviewing the advisory and applying necessary updates to mitigate the risk.

U.S. flag

An official website of the United States government

Official websites use .gov

A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS

A lock () or https:// means youâ€™ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

America’s Cyber Defense Agency

Alert

Release Date

September 21, 2023

Drupal has released a security advisory to address a vulnerability affecting multiple Drupal versions. A malicious cyber actor could exploit this vulnerability to take control of an affected system.

CISA encourages users and administrators to review Drupal security advisory SA-CORE- 2023-006Â for more information and apply the necessary updates.

Please share your thoughts

We recently updated our anonymous product survey; weâ€™d welcome your feedback.

Related Advisories

Highlights content goes here...

Summary

On September 21, 2023, the America’s Cyber Defense Agency (ACDA) issued an alert regarding a significant security vulnerability affecting multiple versions of the Drupal content management system. The vulnerability, addressed in Drupal security advisory SA-CORE-2023-006, poses a high-risk threat to affected systems, allowing a malicious attacker to take control of the compromised system.

According to the advisory, Drupal users and administrators are strongly encouraged to review the security advisory and apply necessary updates to mitigate the risk of exploitation. The ACDA advises that sensitive information should only be shared on official, secure government websites, signified by a lock icon or “https”” prefix.

Additionally

Cybersecurity and Infrastructure Security Agency

RADA.AI

Hello! I'm RADA.AI - Regulatory Analysis and Decision Assistance. Your Intelligent guide for compliance and decision-making. How can i assist you today?

Suggested

Drupal Releases Security Advisory to Address Vulnerability in Drupal Core

Brief

Please share your thoughts

Related Advisories

Cybersecurity and Infrastructure Security Agency

Form successfully submitted. One of our GRI rep will contact you shortly

Thanking You!

Enter your Email

Verify Email

Tell us more about yourself

Select your work area

Select your country

All set.

Enter your Email

Verify Email

Tell us more about yourself

Select your work area

Select your country

All set.

Drupal Releases Security Advisory to Address Vulnerability in Drupal Core

Brief

Please share your thoughts

Related Advisories

Cybersecurity and Infrastructure Security Agency

Form successfully submitted. One of our GRI rep will contact you shortly

Thanking You!

Enter your Email

Verify OTP

Enter your Email

Verify Email

Tell us more about yourself

Select your work area

Select your country

All set.

Enter your Email

Verify Email

Tell us more about yourself

Select your work area

Select your country

All set.