Boletines de Vulnerabilidades

Drupal Core - Multiple Vulnerabilities - SA-CORE-2018-006

   
Software afectado Drupal
 
Advisory ID: DRUPAL-SA-CORE-2018-006Project: Drupal coreVersion: 7.x, 8.xDate: 2018-October-17DescriptionContent moderation - Moderately critical - Access bypass - Drupal 8 In some conditions, content moderation fails to check a users access to use certain transitions, leading to an access bypass.In order to fix this issue, the following changes have been made to content moderation which may have implications for backwards compatibility:ModerationStateConstraintValidatorTwo additional services

More info:

https://www.drupal.org/sa-core-2018-006