Drupal has released security updates to address a critical
vulnerability in Drupal 7, 8.8 and earlier, 8.9, and 9.0. An attacker could
exploit this vulnerability to take control of an affected system.
encourages users and administrators to review the Drupal Advisory SA-CORE-2020-012, apply the
necessary updates, and follow the additional recommendation.