CVE-2019-6342

CVSS 3.1: 9.8 critical
EPSS: 2%p78
Published: May 28, 2020 · May 28, 2020
Modified: Jun 17, 2026

Analyze CVE-2019-6342 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4.

Vendors: drupal

Products: drupal

Ecosystems: Drupal

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news

1 story

CVE-2019-6342 flaw allows hackers to compromise Drupal 8.7.4 websites

Security AffairsJul 18, 09:34 UTC · Jul 18, 2019VulnerabilityCVE-2019-6342 CVE-2019-63401 · 1 read