Several Access Bypass, CSRF Vulnerabilities Patched in Drupal
Drupal developers on Wednesday informed users that updates released for Drupal 8.9, 9.1 and 9.2 patch five vulnerabilities that can be exploited for cross-site request forgery (CSRF) and access bypass.
Read more: Several Access Bypass, CSRF Vulnerabilities Patched in Drupal
Story added 16. September 2021, content source with full text you can find at link above.