Vulnerability DRUPAL-CONTRIB-2023-040

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 years ago
August 23, 2023 at 05:24 PM UTC
No summary available
<1.0.16
<1.0.16

Details

The Data Field module provides a way of building field types that are made up of other fields, a simpler alternative to e.g. the Paragraphs system.

Access to these forms isn't properly validated, allowing a user with the "access content" permission to view and edit fields on entities.

Impacted packages

Timeline

Published
3 years ago
August 23, 2023 at 05:24 PM UTC
Last Modified
1 month ago
September 10, 2026 at 03:45 AM UTC