{"id":"DRUPAL-CONTRIB-2023-005","aliases":[],"title":"DRUPAL-CONTRIB-2023-005","description":"The Apigee Edge module allows connecting a Drupal site to Apigee X / Edge in order to build a developer portal.\n\nPrevious module versions did not support entity query level access checking, which could have led to information disclosure or access bypass in various places.","severity":"unknown","score":null,"published":"2023-02-01T16:13:42.000Z","modified":"2026-09-10T03:45:05.456Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist:https://packages.drupal.org/8","name":"drupal/apigee_edge","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.27.0"}],"type":"ECOSYSTEM","database_specific":{"constraint":"<1.27.0"}},{"events":[{"introduced":"2.0.0"},{"fixed":"2.0.8"}],"type":"ECOSYSTEM","database_specific":{"constraint":">=2.0.0 <2.0.8"}}],"versions":[],"fixed":["1.27.0","2.0.8"]}],"references":["https://www.drupal.org/sa-contrib-2023-005"],"sources":[{"name":"OSV","id":"DRUPAL-CONTRIB-2023-005","modified":"2026-09-10T03:45:05.456106059Z","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2023-005"}],"assessments":[]}