—

DRUPAL-CONTRIB-2019-004

Details

The Preview Link module enables you to generate preview links so anonymous users can access unpublished revisions of content. The last release of the module introduced an access bypass allowing users to present invalid tokens but still access unpublished content.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/preview_link

Introduced in: 0Fixed in: 1.1.0

Upgrade drupal/preview_link to 1.1.0 or newer (ecosystem packagist:https://packages.drupal.org/8).

References

https://www.drupal.org/sa-contrib-2019-004[WEB]