Description
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.
Remediation
References
Related Vulnerabilities
PHP Numeric Errors Vulnerability (CVE-2016-1904)
WordPress 'wp-trackback.php' SQL Injection Vulnerability (1.5)
WordPress Plugin ReviewX-Multi-criteria Rating & Reviews for WooCommerce CSV Injection (1.6.7)
WordPress Plugin Download Shortcode Local File Inclusion (0.2.3)
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0702)