Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Several exploit paths exist through contributed modules, and at least one known path needs no login.
Se muestra el contenido original; la traduccion localizada aun no esta disponible.
Qué ocurrió
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Several exploit paths exist through contributed modules, and at least one known path needs no login.
Por que importa
The incident may affect operational continuity, asset safety or trust around Security. Watch for verified scope and remediation.
Entidades afectadas
Ver evidencia
1 articulos · 1 informe original · 1 independientes
- The Hacker NewsFuente primaria · Respalda · EN · 100%Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules ↗
Afirmaciones
- Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules Observado
Conflictos
No se detectaron conflictos importantes en la evidencia disponible.
Cronología
- Primera publicación
- No verificado · 80/65%
Movimiento del mercado posterior al evento
La reacción del mercado aún no está disponible para este activo y periodo.