Vulnerability DRUPAL-CONTRIB-2024-034

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 years ago
September 04, 2024 at 03:35 PM UTC
No summary available

Details

This module enables you to configure a wiki-like input filter that allows users to create links to site and external content.

The module doesn't sufficiently check if a user has access to some URLs before rendering them as links.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access content" (which is commonly assigned to all roles), and the site must be configured to disallow access to certain content.

Impacted packages

Timeline

Published
2 years ago
September 04, 2024 at 03:35 PM UTC
Last Modified
28 days ago
September 10, 2026 at 03:45 AM UTC