Drupal has published a security advisory to address vulnerabilities affecting Drupal versions 7, 9.2 and 9.3 on the 16th February 2022. It is recommended that you take the necessary precautions by ensuring your products are always updated. Affected products are:
For more information on these updates, you can follow these URLs:
https://www.drupal.org/sa-core-2022-003
https://www.drupal.org/sa-core-2022-004
The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary.
PDF Download: Drupal Security Advisory.pdf
References