Vulnerability advisory
GHSA-xq62-62c9-22mg
Drupal Improper Access Control
Also known as CVE-2019-6342DRUPAL-CORE-2019-008
Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected versions
drupal/core Packagist
All drupal/core advisories →| Affected | Fixed in |
|---|---|
8.7.4 to before 8.7.5 | 8.7.5Advisories → |
Also listed as affected (1) | |
Description
An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4.