Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-6379
5.1
MEDIUMCVSS v2
Severity scale
010
Description
Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 8.2.5, = 8.2.0, = 8.2.3, = 8.2.4, = 8.2.6, = 8.2.1, = 8.2.2NVD
drupal
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app= 8.2.5, = 8.2.0, = 8.2.3, = 8.2.4, = 8.2.6, = 8.2.1, = 8.2.2NVD
NPM