—

DRUPAL-CONTRIB-2023-010

Details

The Media Responsive Thumbnail module allows media reference fields to be rendered as a responsive image.

This module does not properly check entity access prior to rendering media. This may result in users seeing thumbnails of media items they do not have access to.

This release was coordinated with [SA-CORE-2023-002](https://www.drupal.org/sa-core-2023-002).

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/media_responsive_thumbnail

Introduced in: 0Fixed in: 1.5.0

Upgrade drupal/media_responsive_thumbnail to 1.5.0 or newer (ecosystem packagist:https://packages.drupal.org/8).

References

https://www.drupal.org/sa-contrib-2023-010[WEB]