—
DRUPAL-CONTRIB-2022-055
Details
This module enables you to restrict content via taxonomy terms and related permissions.
The module doesn't sufficiently restrict cached content in certain circumstances.
This vulnerability is mitigated by the fact that it only occurs when multiple entity types are enabled in the module.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/permissions_by_term
Introduced in:
0Fixed in: 3.1.19Upgrade drupal/permissions_by_term to 3.1.19 or newer (ecosystem packagist:https://packages.drupal.org/8).