onyx

onyx --cves cve-2019-6342

CVE-2019-6342

CRITDrupal
score
<0.1
cvss
9.8
epss
2.2%
published
2020-05-28
kev added
—
first seen

Drupal 8.7.4 contains an access bypass caused by the enabled experimental Workspaces module, letting attackers bypass access controls, exploit requires the Workspaces module to be enabled.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2020-05-28 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 2.1%2026-09-23: epss 2.1%2026-09-24: epss 2.1%2026-09-25: epss 2.1%2026-09-26: epss 2.1%2026-09-27: epss 2.1%2026-09-28: epss 2.1%2026-09-29: epss 2.1%2026-09-30: epss 2.1%2026-10-01: epss 2.1%2026-10-02: epss 2.1%2026-10-03: epss 2.1%2026-10-04: epss 2.1%2026-10-05: epss 2.1%2026-10-06: epss 2.1%2026-10-07: epss 2.1%2026-10-08: epss 2.1%2026-10-09: epss 2.1%2026-10-10: epss 2.1%2026-10-11: epss 2.1%2026-10-12: epss 2.1%2026-10-13: epss 2.2%2026-10-14: epss 2.2%2026-10-15: epss 2.2%2026-10-16: epss 2.2%2026-10-18: epss 2.2%2026-10-19: epss 2.2%2026-10-20: epss 2.2%2026-10-21: epss 2.2%2.2%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

NVD-CWE-noinfo

References 1