Lucene search
+L

1 matches found

Drupal
Drupal
added 2022/05/25 12:0 a.m.17 views

Entity Browser Block - Moderately critical - Access bypass - SA-CONTRIB-2022-044

Entity Browser Block provides a Block Plugin for every Entity Browser on your site. The module didn't sufficiently check entity view access in the block form. This vulnerability is mitigated by the fact that an attacker must be able to place a block - either through the core "Block Layout" page o...

6.3AI score
SaveExploits0References5
Rows per page
Query Builder