# MA-869.102022: MyCERT Advisory - Drupal Releases Security Updates

**Date:** 02 Oct 2022  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-869.102022  
**Advisory ID:** MA-869.102022

---

**1.0 Introduction**
Recently, Drupal has released a security update to address a vulnerability affecting multiple versions of Drupal.
**2.0 Impact**
An attacker could exploit this vulnerability to access sensitive information.
**3.0 Affected Products**
Drupal Core versions 8.0.0 up to 9.3.22 and 9.4.0 up to 9.4.7.
**4.0 Recommendations**
4.1 Install the latest version:
- If you are using Drupal 9.4, update to [Drupal 9.4.7](https://www.drupal.org/project/drupal/releases/9.4.7).
- If you are using Drupal 9.3, update to [Drupal 9.3.22](https://www.drupal.org/project/drupal/releases/9.3.22).
Generally, MyCERT advises users to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
- [**https://www.cisa.gov/uscert/ncas/current-activity/2022/09/30/drupal-releases-security-update**](https://www.cisa.gov/uscert/ncas/current-activity/2022/09/30/drupal-releases-security-update)
- [**https://www.drupal.org/sa-core-2022-016**](https://www.drupal.org/sa-core-2022-016)