{"action":"Upgrade drupal/core to 8.7.5 or later.","affected":[{"fixed":"8.7.5","introduced":"8.7.4"}],"component":"drupal/core","cve_ids":["CVE-2019-6342"],"ecosystem":"Packagist","epss":0.02202,"exploited":false,"fixed_versions":["8.7.5"],"ghsa_id":"GHSA-xq62-62c9-22mg","id":"tcs_01M5KER7RRAMZZ21XY77NATEYV","modified_at":"2026-09-19T19:22:51Z","published_at":"2019-07-17T16:05:11Z","references":["https://osv.dev/vulnerability/DRUPAL-CORE-2019-008","https://www.drupal.org/sa-core-2019-008"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DRUPAL-CORE-2019-008","url":"https://osv.dev/vulnerability/DRUPAL-CORE-2019-008"}],"summary":"In Drupal 8.7.4, when the [experimental](https://www.drupal.org/core/experimental#beta) Workspaces module is enabled, an access bypass condition is created."}