VDB
Sign up
—

DRUPAL-CONTRIB-2022-016

Details

**Update** Maintainers stepped forward, fixed the security issue, and Vocabulary Permissions Per Role is supported again.

The module allows adding to/editing terms of/removing terms from vocabularies per role.

The module did not properly check access for certain operations allowing an unauthorized malicious user to view, modify and delete terms.

**Original advisory** The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: <https://www.drupal.org/node/251466#procedure---own-project---unsupported>

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/vppr
Introduced in: 0Fixed in: 1.2.0

Upgrade drupal/vppr to 1.2.0 or newer (ecosystem packagist:https://packages.drupal.org/8).

References