Access Control Bypass

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to Access Control Bypass via a generic entity access API which was not completely integrated with existing permissions, resulting ...