—
DRUPAL-CONTRIB-2024-007
Details
The Entity Delete Log module tracks the deletion of configured entity types, such as node or comments.
It does not add sufficient permission to the log report page, allowing an attacker to view information from deleted entities.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/entity_delete_log
Introduced in:
0Fixed in: 1.1.1Upgrade drupal/entity_delete_log to 1.1.1 or newer (ecosystem packagist:https://packages.drupal.org/8).