Drupal has published a security advisory to address vulnerabilities affecting the following products on June 21, 2023. It is recommended that you take the necessary precautions to ensure your products are always protected.
Photos module 6.0.x for Drupal 9 or 10 versions prior to 6.0.4
Photos module 8.x for Drupal 9 versions prior to 8.x-4.5
For more information on these updates, you can follow the URL:
https://www.drupal.org/sa-contrib-2023-022
The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary.
PDF Download: Drupal Security Advisory.pdf
References
Drupal Security Advisories. (2023, June 21). Retrieved from Drupal.
https://www.drupal.org/sa-contrib-2023-022
Drupal Security Advisory. (2023, June 23). Retrieved from Canadian Centre for Cyber Security.
https://www.cyber.gc.ca/en/alerts-advisories/drupal-security-advisory-av23-355