Two Code Execution Flaws Patched in Drupal
Updates released on Wednesday for Drupal 7, 8.5 and 8.6 address two potentially serious vulnerabilities that can be exploited for arbitrary code execution.
Read more: Two Code Execution Flaws Patched in Drupal
Story added 17. January 2019, content source with full text you can find at link above.