
Drupal patches two critical RCE flaws and XSS bugs
Fixes are in Drupal 11.4.10, 11.3.19 and 10.6.19, plus Entity List 3.0.10; Field UI can be uninstalled.
1
3 stories, newest first · one card per story

Fixes are in Drupal 11.4.10, 11.3.19 and 10.6.19, plus Entity List 3.0.10; Field UI can be uninstalled.

Drupal patched two critical remote code execution flaws and warned exploits could appear within hours or days.

Bipartisan US lawmakers urged the Commerce Department to add hack-for-hire firms BellTroX, CyberRoot, and Appin/Sunkissed Organic Farms to the entity list.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views