—
DRUPAL-CONTRIB-2021-024
Details
This project enables administrators to restrict access from anonymous and regular users to pre-defined pages.
The administration routes used by the project lacked proper permissions, allowing untrusted users to access, create and modify the module's settings.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/pages_restriction
Introduced in:
0Fixed in: 1.4.0Upgrade drupal/pages_restriction to 1.4.0 or newer (ecosystem packagist:https://packages.drupal.org/8).