—
DRUPAL-CONTRIB-2026-107
상세
The module provides a permission that allows users to configure email templates containing Twig code. This permission was not marked as restricted.
A site administrator might inadvertently grant this permission to less-trusted users. This would allow those users to execute Twig within email templates, and to gain access to functionality and information intended only for highly trusted administrators.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
Packagist:https://packages.drupal.org/8 / drupal/content_moderation_notifications
최초 영향 버전:
0 수정 버전: 3.9.0 Upgrade drupal/content_moderation_notifications to 3.9.0 or newer (ecosystem packagist:https://packages.drupal.org/8).