{"id":"DRUPAL-CONTRIB-2022-016","aliases":[],"title":"DRUPAL-CONTRIB-2022-016","description":"**Update**  \nMaintainers stepped forward, fixed the security issue, and Vocabulary Permissions Per Role is supported again.\n\nThe module allows adding to/editing terms of/removing terms from vocabularies per role.\n\nThe module did not properly check access for certain operations allowing an unauthorized malicious user to view, modify and delete terms.\n\n**Original advisory**  \nThe security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: <https://www.drupal.org/node/251466#procedure---own-project---unsupported>","severity":"unknown","score":null,"published":"2022-01-25T18:39:26.000Z","modified":"2026-09-10T03:46:05.869Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist:https://packages.drupal.org/8","name":"drupal/vppr","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.0"}],"type":"ECOSYSTEM","database_specific":{"constraint":"<1.2.0"}}],"versions":[],"fixed":["1.2.0"]}],"references":["https://www.drupal.org/sa-contrib-2022-016"],"sources":[{"name":"OSV","id":"DRUPAL-CONTRIB-2022-016","modified":"2026-09-10T03:46:05.869475249Z","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2022-016"}],"assessments":[]}