Packagist/drupal/drupal CVE-2016-7572: medium 4.3, EPSS 1.72%

Drupal Unprivileged access to config export

Action: Upgrade drupal/drupal to 8.1.10 or later.

composer require drupal/drupal:8.1.10

Affected

Fixed versions

Sources

• osv: GHSA-fmqh-2j2x-vgp3#Packagist/drupal/drupal
• https://nvd.nist.gov/vuln/detail/CVE-2016-7572
• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2016-7572.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2016-7572.yaml
• https://github.com/drupal/core
• https://www.drupal.org/SA-CORE-2016-004
• http://www.securityfocus.com/bid/93101
• http://www.securitytracker.com/id/1036886

CVE-2016-7572 · published 2022-05-17T03:47:57Z · modified 2024-12-06T05:33:57.404844Z · JSON