—
DRUPAL-CONTRIB-2025-018
Details
The GDPR Task submodule enables you to create GDPR tasks.
The module doesn't sufficiently protect against Cross Site Request Forgery (CSRF) attacks by validating user identity and intent when creating tasks.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/gdpr
Introduced in:
0Fixed in: 3.0.1Upgrade drupal/gdpr to 3.0.1 or newer (ecosystem packagist:https://packages.drupal.org/8).