Description
Drupal Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to bypass certain security restrictions and perform otherwise restricted actions. Drupal Core versions 8.x.x ranging from 8.0.0 and up to and including 8.6.18 are vulnerable.
Remediation
Update to Drupal Core version 8.8.1 or latest
References
Related Vulnerabilities
WordPress Plugin Lightbox Plus Colorbox Cross-Site Scripting (2.7.2)
Internet Information Services CVE-2006-6578 Vulnerability (CVE-2006-6578)
Oracle HTTP Server CVE-2022-21593 Vulnerability (CVE-2022-21593)
Grafana CVE-2023-4399 Vulnerability (CVE-2023-4399)
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1868)