—

DRUPAL-CORE-2020-004

Quick fix

DRUPAL-CORE-2020-004 — drupal/core: upgrade to the fixed version with the command below.

composer require drupal/core:^8.8.8

Details

The Drupal core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities.

Enter the version of the package you're using.

Introduced in: 8.0.0Fixed in: 8.8.8

Fixcomposer require drupal/core:^8.8.8