A number of issues exist in the content management system Drupal that could lead to code execution and the theft of database credentials via a man-in-the-middle attack, a researcher warns. A number of ...

Drupal released a point update for its core engine to patch a critical access bypass vulnerability. A critical vulnerability in the Drupal Core engine was addressed in an update released Wednesday.

Developers of the popular Drupal content management system are working to secure the software’s update mechanism after a researcher recently found weaknesses in it. Last week, researcher Fernando ...