Drupal Releases Security Updates
Cybersecurity and Infrastructure Security Agency sent this bulletin at 06/13/2022 01:43 PM EDT
You are subscribed to Cybersecurity Advisories for Cybersecurity and Infrastructure Security Agency. This information has recently been updated, and is now available.
06/13/2022 11:00 AM EDT
Original release date: June 13, 2022
Drupal has released security updates to address a Guzzle third-party library vulnerability that does not affect Drupal core but may affect some contributed projects or custom code on Drupal sites. Exploitation of this vulnerability could allow a remote attacker to take control of an affected website.
CISA encourages users and administrators to review Drupal security advisory SA-CORE-011 and apply the necessary updates.
This product is provided subject to this Notification and this Privacy & Use policy.