DRUPAL-CONTRIB-2019-095unknown
DRUPAL-CONTRIB-2019-095
No CVE assignedCheck your stack
The advisory, in context
The Permissions by Term module extends Drupal by functionality for restricting access to single nodes via taxonomy terms.
The module doesn't sufficiently restrict access to node previews, when the Search API module is used to display nodes in search result lists.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
drupal/permissions_by_term Packagist:https://packages.drupal.org/8
Ecosystem versions
Earlier releases before 2.0.0
Fixed in 2.0.0
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.0"
}
],
"type": "ECOSYSTEM",
"database_specific": {
"constraint": "<2.0.0"
}
}
],
"versions": []
}