Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-6919
6
MEDIUMCVSS v2
Severity scale
010
Description
Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the site allows PATCH requests.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 8.2.5, = 8.0.0, = 8.2.0, = 8.2.3, = 8.3.0, = 8.1.0, = 8.1.8, = 8.1.9, = 8.1.2, = 8.1.5, = 8.1.6, = 8.0.1, = 8.1.7, = 8.2.6, = 8.0.2, = 8.0.3, = 8.1.1, = 8.1.10, = 8.2.1, = 8.0.4, = 8.0.5, = 8.1.3, = 8.2.7, = 8.1.4, = 8.2.4, = 8.2.2, = 8.0.6NVD
drupal
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app= 8.2.5, = 8.0.0, = 8.2.0, = 8.2.3, = 8.3.0, = 8.1.0, = 8.1.8, = 8.1.9, = 8.1.2, = 8.1.5, = 8.1.6, = 8.0.1, = 8.1.7, = 8.2.6, = 8.0.2, = 8.0.3, = 8.1.1, = 8.1.10, = 8.2.1, = 8.0.4, = 8.0.5, = 8.1.3, = 8.2.7, = 8.1.4, = 8.2.4, = 8.2.2, = 8.0.6NVD
NPM