—

DRUPAL-CONTRIB-2019-069

Details

This module provides a new UI experience for node editing - Gutenberg editor.

The routes used by the Gutenberg editor lack proper permissions allowing untrusted users to view and modify some content they should not be able to view or modify.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/gutenberg

Introduced in: 0Fixed in: 1.8.0

Upgrade drupal/gutenberg to 1.8.0 or newer (ecosystem packagist:https://packages.drupal.org/8).

References

https://www.drupal.org/sa-contrib-2019-069[WEB]