TZCERT-SU-24-0566 (Drupal Security Update)

Drupal has released security updates to address vulnerabilities in Migrate queue importer, Image Sizes and Drupal REST & JSON API Authentication. Exploitation of these vulnerabilities may allow an attacker to bypass access control.

Users and administrators are encouraged to review Drupal Security Advisories sa-contrib-2024-024, sa-contrib-2024-023 and sa-contrib-2024-022 and apply necessary updates.