Slashdot Mirror

← Back to Stories (view on slashdot.org)

Drupal Update Process Flawed By Multiple Bugs (softpedia.com)

Posted by samzenpus on from the protect-ya-neck dept.

An anonymous reader writes: The Drupal CMS, a favorite with large enterprises, has a few bugs in its update process, affecting both the Drupal core update and its modules. The biggest flaw of the three discovered by IOActive researchers allows an attacker to take over the sites via poisoned updates. What's worse is that Drupal's team had known of this issue since 2012, but only recently reopened discussions on fixing the problem.

1 of 55 comments (clear)

  1. Derpal by sexconker · · Score: -1, Troll

    Derpal is Wordpress for business / education. It's what you use to host a site when you need some bullshit on the web quickly, you don't care about it being good or secure, and you want someone else to manage the content. (Note that they'll still come to you for help for every single thing.)