—

DRUPAL-CONTRIB-2022-040

Details

The Wingsuit module enables site builders to build UI Patterns (and|or) Twig Components with Storybook and use them without any mapping code in Drupal.

The module doesn't have an access check for the admin form allowing an attacker to view and modify the Wingsuit configuration.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/wingsuit_companion

Introduced in: 0Fixed in: 1.1.0

Upgrade drupal/wingsuit_companion to 1.1.0 or newer (ecosystem packagist:https://packages.drupal.org/8).

References

https://www.drupal.org/sa-contrib-2022-040[WEB]