Vulnerability Bulletins |
Drupal Core - Multiple Vulnerabilities - SA-CORE-2018-006 |
|
| Affected software | Drupal |
|
Advisory ID: DRUPAL-SA-CORE-2018-006Project: Drupal coreVersion: 7.x, 8.xDate: 2018-October-17DescriptionContent moderation - Moderately critical - Access bypass - Drupal 8 In some conditions, content moderation fails to check a users access to use certain transitions, leading to an access bypass.In order to fix this issue, the following changes have been made to content moderation which may have implications for backwards compatibility:ModerationStateConstraintValidatorTwo additional services More info: https://www.drupal.org/sa-core-2018-006 |
|