Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22432
HistoryFeb 03, 2020 - 6:05 a.m.

Authorization Bypass

2020-02-0306:05:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.003 Low

EPSS

Percentile

70.0%

drupal/drupal is vulnerable to authorization bypass. The vulnerability exists when the experimental Workspaces is enabled as Drupal does not properly check if the user owns the workspace.

CPENameOperatorVersion
drupal/drupaleq8.7.4