—
DRUPAL-CONTRIB-2020-003
Details
Views Bulk Operations provides enhancements to running bulk actions on views.
The module contains an access bypass vulnerability that might allow users to execute views actions that they should not have access to.
This vulnerability is mitigated by the fact that it only occurs in the case of customised action access (by means of hook\_action\_info\_alter).
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/views_bulk_operations
Introduced in:
0Fixed in: 2.6.0Upgrade drupal/views_bulk_operations to 2.6.0 or newer (ecosystem packagist:https://packages.drupal.org/8).