Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Drupal Core 8.x Multiple Security Bypass Vulnerabilities - CVE-2017-6925 - Vulnerability Database
Drupal

Drupal Core 8.x Multiple Security Bypass Vulnerabilities - CVE-2017-6925

Medium
Reference: CVE-2017-6925
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-6925
Title: Drupal Core 8.x Multiple Security Bypass Vulnerabilities
Overview:

Drupal Core is prone to multiple security bypass vulnerabilities. Exploiting these issues may allow attackers to perform otherwise restricted actions and subsequently post comments via REST that are approved even if the user does not have permission to post approved comments or access view create update or delete entities. Drupal Core versions 8.x ranging from 8.0.0 and up to and including 8.3.6 are vulnerable.