Several Vulnerabilities Patched in Drupal 8
Several vulnerabilities have been patched in the Drupal content management system (CMS) with the release of version 8.2.7, including access bypass, cross-site request forgery (CSRF) and remote code execution flaws.
The most serious of them, rated critical and tracked as CVE-2017-6377, is an access bypass weakness affecting the editor module.
Read more: Several Vulnerabilities Patched in Drupal 8
Story added 16. March 2017, content source with full text you can find at link above.