Packagist/drupal/core CVE-2019-6342: critical 9.8, EPSS 2.20%

Drupal Improper Access Control

Action: Upgrade drupal/core to 8.7.5 or later.

composer require drupal/core:8.7.5

Affected

Fixed versions

Sources

• osv: GHSA-xq62-62c9-22mg
• https://nvd.nist.gov/vuln/detail/CVE-2019-6342
• https://github.com/drupal/core/commit/bac9bde22bb545ff72570d8a46055c6c6e70e7c5
• https://github.com/drupal/core
• https://www.drupal.org/sa-core-2019-008

CVE-2019-6342 · published 2024-01-11T15:43:15Z · modified 2025-12-10T23:41:17.020713Z · JSON