—

DRUPAL-CONTRIB-2023-005

Details

The Apigee Edge module allows connecting a Drupal site to Apigee X / Edge in order to build a developer portal.

Previous module versions did not support entity query level access checking, which could have led to information disclosure or access bypass in various places.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/apigee_edge

Introduced in: 0Fixed in: 1.27.0

Upgrade drupal/apigee_edge to 1.27.0 or newer (ecosystem packagist:https://packages.drupal.org/8).

References

https://www.drupal.org/sa-contrib-2023-005[WEB]