—
DRUPAL-CONTRIB-2023-012
Details
This module is a tool for developers, analysts, and administrators that allows them to generate reports on a given Drupal installation.
The module does not sufficiently sanitize some data presented in its reports.
This vulnerability is mitigated by the fact that an attacker must have a role with permissions to administer an impacted content type.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/xray_audit
Introduced in:
0Fixed in: 1.1.1Upgrade drupal/xray_audit to 1.1.1 or newer (ecosystem packagist:https://packages.drupal.org/8).