—
DRUPAL-CORE-2020-008
Quick fix
DRUPAL-CORE-2020-008 — drupal/core: upgrade to the fixed version with the command below.
composer require drupal/core:^8.8.10Details
The experimental Workspaces module allows you to create multiple workspaces on your site in which draft content can be edited before being published to the live workspace.
The Workspaces module doesn't sufficiently check access permissions when switching workspaces, leading to an access bypass vulnerability. An attacker might be able to see content before the site owner intends people to see the content.
This vulnerability is mitigated by the fact that sites are only vulnerable if they have installed the experimental Workspaces module.
Are you affected?
Enter the version of the package you're using.