Drupal to Patch Highly Critical Vulnerability at Risk of Quick Exploitation
Vulnerabilities
Drupal says attackers may develop an exploit for the vulnerability within hours or days.
Drupal is warning users that it’s preparing a patch for a ‘highly critical’ vulnerability that may be exploited by threat actors shortly after its disclosure.
In a notice posted this week, the developers of the open source content management system (CMS) that powers hundreds of thousands of websites said patches will be released for all supported versions on May 20, between 17:00 and 21:00 UTC.
“Reserve time on May 20 during the release window to determine whether your sites are affected and in need of an immediate update. Mitigation information will be included in the advisory,” Drupal developers said.
They believe an exploit for the vulnerability “might” be created within hours or days of disclosure.
“Neither the Security Team nor any other party is able to release any more information about this vulnerability until the...
Copyright of this story solely belongs to securityweek.com. To see the full text click HERE
