DRUPAL-CONTRIB-2020-029unknown
DRUPAL-CONTRIB-2020-029
No CVE assignedCheck your stack
The advisory, in context
The Modal form module is a toolset for quick start of using forms in modal windows.
Any form is available for view and submit when the modal_form module is installed. The only requirement is to know the form's fully-qualified class name.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
drupal/modal_form Packagist:https://packages.drupal.org/8
Ecosystem versions
Earlier releases before 1.2.0
Fixed in 1.2.0
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.0"
}
],
"type": "ECOSYSTEM",
"database_specific": {
"constraint": "<1.2.0"
}
}
],
"versions": []
}