VDB
Sign up
—

DRUPAL-CORE-2020-011

Quick fix

DRUPAL-CORE-2020-011 — drupal/core: upgrade to the fixed version with the command below.

composer require drupal/core:^8.8.10

Details

A vulnerability exists in the File module which allows an attacker to gain access to the file metadata of a permanent private file that they do not have access to by guessing the ID of the file.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/drupal/core
Introduced in: 8.0.0Fixed in: 8.8.10
Fixcomposer require drupal/core:^8.8.10

References