DRUPAL-CONTRIB-2019-069

Import Source

https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/gutenberg/DRUPAL-CONTRIB-2019-069.json

JSON Data

https://api.osv.dev/v1/vulns/DRUPAL-CONTRIB-2019-069

Published

2019-09-25T14:55:33Z

Modified

2025-12-10T23:33:47.740133Z

Summary

[none]

Details

This module provides a new UI experience for node editing - Gutenberg editor.

The routes used by the Gutenberg editor lack proper permissions allowing untrusted users to view and modify some content they should not be able to view or modify.

References

https://www.drupal.org/sa-contrib-2019-069

Credits

- Greg Knaddison
- - https://www.drupal.org/user/36762
- Marco Fernandes
- - https://www.drupal.org/user/2127558

Affected packages

Packagist:https://packages.drupal.org/8 / drupal/gutenberg

Package

Name: drupal/gutenberg
Purl: pkg:composer/drupal/gutenberg

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

1.8.0

Database specific

{
    "constraint": "<1.8.0"
}

Database specific

affected_versions

"<1.8.0"

source

"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/gutenberg/DRUPAL-CONTRIB-2019-069.json"