Vulnerability Bulletins

Drupal core - Moderately critical - Denial of Service - SA-CORE-2019-009

   
Affected software Drupal
 
Project: Drupal coreVersion: 8.8.x-dev8.7.x-devDate: 2019-December-18Security risk: Moderately critical 12∕25 AC:None/A:None/CI:None/II:None/E:Theoretical/TD:AllVulnerability: Denial of ServiceDescription: A visit to install.php can cause cached data to become corrupted. This could cause a site to be impaired until caches are rebuilt.Solution: Install the latest version:If you are using Drupal 8.7.x, upgrade to Drupal 8.7.11.If you are using Drupal 8.8.x, upgrade to Drupal 8.8.1.Versions

More info:

https://www.drupal.org/sa-core-2019-009