VDB
Sign up
—

DRUPAL-CONTRIB-2023-025

Details

This module provides integration with Mailchimp, a popular email delivery service.

A route related to OAuth authentication is not protected against a Cross Site Request Forgery attack.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/mailchimp
Introduced in: 2.2.0Fixed in: 2.2.2

Upgrade drupal/mailchimp to 2.2.2 or newer (ecosystem packagist:https://packages.drupal.org/8).

References