DSA-4693: -1 drupal7 -- security update
Published May 26, 2020
·Updated
drupal7 - security update
Other sources
Several vulnerabilities were discovered in Drupal, a fully-featured content management framework, which could result in an open redirect or cross-site scripting.
Affected Software
2 affected components
debian/drupal7
debian/drupal7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
drupal7to a version that resolves this vulnerability.Patch DSA-4693-1
Event History
May 26, 2020
Advisory Published
12:00 AM
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
What types of attacks are addressed by this update?
The update addresses vulnerabilities that could lead to an open redirect or cross-site scripting (XSS) in Drupal.
2
Which tracked vulnerabilities are covered?
The advisory references CVE-2020-11022, CVE-2020-11023, and CVE-2020-13662.