Drupal 9.3.12 Released
Drupal 9.3 implemented a generic entity access API for entity revisions. However, this API was not completely integrated with existing permissions, resulting in some possible access bypass for users who have access to use revisions of content generally, but who do not have access to individual items of node and media content.
This vulnerability only affects sites using Drupal's revision system.
The solution is to install the latest version, if you are using Drupal 9.3, update to Drupal 9.3.12.
All releases prior to Drupal 9.3 (including Drupal 7) are not affected.
Source:
Note: The vision of this web portal is to help promote news and stories around the Drupal community and promote and celebrate the people and organizations in the community. We strive to create and distribute our content based on these content policy. If you see any omission/variation on this please let us know in the comments below and we will try to address the issue as best we can.
Comments
You may also like
Featured
Latest News
Upcoming Events
Latest Opportunities
Call for Support
