| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/core | ≥ 8.0, < 8.2.8≥ 8.3.0, < 8.3.1 | 8.2.88.3.1 |
| drupal/drupal | ≥ 8.0, < 8.2.8≥ 8.3.0, < 8.3.1 | 8.2.88.3.1 |
| drupal | = 8.0.0= 8.0.1= 8.0.2= 8.0.3= 8.0.4= 8.0.5= 8.0.6= 8.1.0= 8.1.1= 8.1.10= 8.1.2= 8.1.3= 8.1.4= 8.1.5= 8.1.6= 8.1.7= 8.1.8= 8.1.9= 8.2.0= 8.2.1= 8.2.2= 8.2.3= 8.2.4= 8.2.5= 8.2.6= 8.2.7= 8.3.0 |
Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the site allows PATCH requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free