Security News > 2017 > April > Drupal Closes Access Bypass Vulnerability in Core Engine (Threatpost)

2017-04-20 13:57
Drupal released a point update for its core engine to patch a critical access bypass vulnerability.
News URL
http://threatpost.com/drupal-closes-access-bypass-vulnerability-in-core-engine/125080/
Related news
- Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication (source)
- Moxa Issues Fix for Critical Authentication Bypass Vulnerability in PT Switches (source)
- Critical Next.js Vulnerability Allows Attackers to Bypass Middleware Authorization Checks (source)
- Critical Next.js auth bypass vulnerability opens web apps to compromise (CVE-2025-29927) (source)