VDB
Sign up
—

DRUPAL-CONTRIB-2024-017

Details

Progressive web applications are web applications that load like regular web pages or websites but can offer the user functionality such as working offline, push notifications, and device hardware access traditionally available only to native applications.

This module doesn't sufficiently protect access to the settings form, allowing an unauthorized malicious user to view and modify the module settings.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/advanced_pwa
Introduced in: 0Fixed in: 1.5.0

Upgrade drupal/advanced_pwa to 1.5.0 or newer (ecosystem packagist:https://packages.drupal.org/8).

References