[IT-SecNots] [Security-news] Paragraphs - Critical - Remote Code Execution - SA-CONTRIB-2019-023

[security-news AT drupal.org]

View online: https://www.drupal.org/sa-contrib-2019-023

Project: Paragraphs [1]
Date: 2019-February-20
Security risk: *Critical* 18∕25
AC:None/A:User/CI:All/II:All/E:Theoretical/TD:Uncommon [2]
Vulnerability: Remote Code Execution

Description: 
This resolves issues described in SA-CORE-2019-003 [3] for this module. Not
all configurations are affected. See SA-CORE-2019-003 [4] for details.

Solution: 
  * If you use the Paragraphs module for Drupal 8.x, upgrade to Paragraphs
    8.x-1.6 [5].


[1] https://www.drupal.org/project/paragraphs
[2] https://www.drupal.org/security-team/risk-levels
[3] https://www.drupal.org/sa-core-2019-003
[4] https://www.drupal.org/sa-core-2019-003
[5] https://www.drupal.org/project/paragraphs/releases/8.x-1.6

_______________________________________________
Security-news mailing list
Security-news AT drupal.org
Unsubscribe at https://lists.drupal.org/mailman/listinfo/security-news