Security News > 2018 > February > Drupal Patches Critical Bug That Leaves Platform Open to XSS Attack

2018-02-23 22:13
Drupal has patched several vulnerabilities – both moderately critical and critical – in two versions of its content management system platform.
News URL
http://threatpost.com/drupal-patches-critical-bug-that-leaves-platform-open-to-xss-attack/130070/
Related news
- CISA tags critical Ivanti EPM flaws as actively exploited in attacks (source)
- Critical PHP RCE vulnerability mass exploited in new attacks (source)
- Critical RCE flaw in Apache Tomcat actively exploited in attacks (source)
- Critical GitHub Attack (source)
- Critical Cisco Smart Licensing Utility flaws now exploited in attacks (source)
- Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility (source)
- Critical auth bypass bug in CrushFTP now exploited in attacks (source)