Packagist/drupal/core CVE-2016-7570: medium 4.3, EPSS 1.68%

Drupal Users without "Administer comments" can set comment visibility on nodes they can edit

Action: Upgrade drupal/core to 8.1.10 or later.

composer require drupal/core:8.1.10

Affected

Fixed versions

Sources

• osv: GHSA-6g9h-6v79-w4pc#Packagist/drupal/core
• https://nvd.nist.gov/vuln/detail/CVE-2016-7570
• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2016-7570.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2016-7570.yaml
• https://github.com/drupal/core
• https://www.drupal.org/SA-CORE-2016-004
• http://www.securityfocus.com/bid/93101
• http://www.securitytracker.com/id/1036886

CVE-2016-7570 · published 2022-05-17T03:47:58Z · modified 2024-04-23T22:59:05.069610Z · JSON