Packagist/drupal/core CVE-2023-31250: critical, EPSS 0.54%
Access bypass in Drupal core
Action: Upgrade drupal/core to 7.96 or later.
composer require drupal/core:10.0.8composer require drupal/core:9.5.8composer require drupal/core:9.4.14composer require drupal/core:7.96Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.0 | 10.0.8 | - |
| 9.5.0 | 9.5.8 | - |
| 9.0.0 | 9.4.14 | - |
| 7.0.0 | 7.96 | - |
Fixed versions
| 10.0.8 | 9.5.8 | 9.4.14 | 7.96 |
Sources
- osv: GHSA-8849-cv9f-vccm
- https://nvd.nist.gov/vuln/detail/CVE-2023-31250
- https://github.com/drupal/core
- https://www.drupal.org/sa-core-2023-005
CVE-2023-31250 · published · modified · JSON