Vulnerability DRUPAL-CONTRIB-2023-040
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 years ago
August 23, 2023 at 05:24 PM UTC
No summary available
<1.0.16
<1.0.16
Details
The Data Field module provides a way of building field types that are made up of other fields, a simpler alternative to e.g. the Paragraphs system.
Access to these forms isn't properly validated, allowing a user with the "access content" permission to view and edit fields on entities.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
3 hours ago
No summary available
<2.0.14 DRUPAL-CONTRIB-2026-250
<2.0.14 DRUPAL-CONTRIB-2026-250
Unknown
1 month ago
No summary available
<2.0.13 DRUPAL-CONTRIB-2026-108
<2.0.13 DRUPAL-CONTRIB-2026-108
Impacted packages
Timeline
Published
3 years ago
August 23, 2023 at 05:24 PM UTC
Last Modified
1 month ago
September 10, 2026 at 03:45 AM UTC