Lucene search
+L

1 matches found

Drupal
Drupal
added 2023/12/06 12:0 a.m.21 views

Group - Less critical - Access bypass - SA-CONTRIB-2023-054

The Group module has the ability to make content private to specific groups. When viewing a list of entities, e.g. nodes, a visitor should only see those entities that are either not attached to a group or that they have group access to. The module doesn't sufficiently enforce list access under t...

7AI score
SaveExploits0References10
Rows per page
Query Builder