Vulnerability Bulletins |
Drupal core - Moderately critical - Third-party libraries - SA-CORE-2019-007 |
|
| Affected software | Drupal |
|
Project: Drupal coreDate: 2019-May-08Security risk: Moderately critical 14∕25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:UncommonVulnerability: Third-party librariesDescription: This security release fixes third-party dependencies included in or required by Drupal core. As described in TYPO3-PSA-2019-007: By-passing protection of Phar Stream Wrapper Interceptor:In order to intercept file invocations like file_exists or stat on compromised Phar archives the base name has to be More info: https://www.drupal.org/sa-core-2019-007 |
|