Drupal Praises To $ 1,000 For Bugs In Drupal 8

The creators of the popular content management system (CMS) Drupal is a temporary program started with hackers and researchers who find vulnerabilities in Drupal 8 and reporting are rewarded financially.The final version of Drupal 8 is coming and contains major changes to the architecture. To ensure that any security issues and vulnerabilities are found in time the developers on the platform of Bugcrowd launched a so-called "bug bounty" program.

Until August 31 this year to vulnerabilities in Drupal 8, such as cross-site scripting, SQL injection and cross-site request forgery, to be reported. Depending on the impact of the bug guard a reward of between 50 and 1,000 dollars. The rewards are only for Drupal 8 and run until August 31, although the program can be extendable. The program was started last Wednesday, and there are no bug reports received yet until now.

Drupal.org Accidentally Leaked Email Addresses Users

The website Drupal.org this week inadvertently leaked the email addresses of hundreds of logged in users. Drupal is a popular content management system with a vibrant community. An adjustment to the permissions of the web site on April 15 was a "small" part of the user to see a list of email addresses of users logged.

It would be a total of some 44 IP addresses that the information at that time approached. According Drupal went mainly to managers of Drupal.org and community participants who reported the incident. The problem was 13 hours after being rectified and introduced within 3 hours after such notice was made. The complete solution was made ​​to be within 24 hours after the onset. According Drupal were visible the email addresses of less than 500 people, all of which will be informed immediately. However, all users are advised to be careful with emails that ask for personal information.