CVE-2019-6342

An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4.

Score

CVSS 3.1 9.8 Critical

Status

Modified - mlhess@drupal.org

Published

2020-05-28

Last modified

2024-08-04

Affected products

• Drupal (Drupal)
• Drupal Core (Drupal)

References

• https://www.drupal.org/sa-core-2019-008