An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Drupal | Drupal | 8.7.4 (including) | 8.7.4 (including) |
| Drupal7 | Ubuntu | esm-apps/xenial | * |
| Drupal7 | Ubuntu | esm-infra-legacy/trusty | * |
| Drupal7 | Ubuntu | trusty | * |
| Drupal7 | Ubuntu | trusty/esm | * |
| Drupal7 | Ubuntu | xenial | * |