Drupal Releases Security Update to Address Vulnerability in Private Taxonomy Terms

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

America's Cyber Defense Agency

Drupal has released a security update to address a vulnerability affecting private vocabulary modules for Drupal 8.x. An unauthorized user could exploit this vulnerability to bypass access permissions to create, modify, and delete private vocabulary terms.

CISA encourages users and administrators to review Drupal’s security advisory SA-CONTRIB-2023-001 and apply the necessary update.

Drupal Releases Security Update to Address Vulnerability in Private Taxonomy Terms

Please share your thoughts

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Releases One Industrial Control Systems Advisory

CISA Warns of Hurricane/Typhoon-Related Scams

CISA and Partners Release Cybersecurity Advisory Guidance detailing PRC state-sponsored actors evading detection by “Living off the Land”

Drupal Releases Security Update to Address Vulnerability in Private Taxonomy Terms

Please share your thoughts

Related Advisories

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Releases One Industrial Control Systems Advisory

CISA Warns of Hurricane/Typhoon-Related Scams

CISA and Partners Release Cybersecurity Advisory Guidance detailing PRC state-sponsored actors evading detection by “Living off the Land”