Security Updates for Drupal 8.3.7 and Joomla! 3.7.5
The following security vulnerabilities have been discovered and updating your existing sites is strongly recommended.
Recent security vulnerabilitites in CMSs
- Drupal (Versions <8.3.7)
- Critical - Core - Access Bypass - CVE-2017-6925
- Moderately Critical - Views - Access Bypass - CVE-2017-6923
- Moderately Critical - Core - REST API Access Bypass - CVE-2017-6924
- Joomla!
- High Severity - Core - Information Disclosure - CVE-2017-9933 (Versions <3.7.2)
- High Severity - Core - XSS Vulnerability - CVE-2017-9934 (Versions <3.7.2)
- High Severity - Core-Installer - Lack of Ownership Verification - CVE-2017-11364 (Versions <3.7.3)
- Low Severity - Core - XSS Vulnerability - CVE-2017-11612 (Versions <3.7.3)
- Low Severity - Core - XSS Vulnerability - CVE-2017-7985 (Versions <3.6.5)
New CMS releases
- Drupal 8.3.7 since August 2017
- Wordpress 4.8.1 since August 2017
- Joomla! 3.7.5 since August 2017
Post date:
Monday, September 11, 2017 - 13:01