VDB
Sign up
—

DRUPAL-CORE-2021-009

Quick fix

DRUPAL-CORE-2021-009 — drupal/core: upgrade to the fixed version with the command below.

composer require drupal/core:^8.9.19

Details

The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data.

Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.

This advisory is not covered by [Drupal Steward](/steward).

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/drupal/core
Introduced in: 8.0.0Fixed in: 8.9.19
Fixcomposer require drupal/core:^8.9.19

References