DRUPAL-CONTRIB-2019-095

See a problem?
Import Source
https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/permissions_by_term/DRUPAL-CONTRIB-2019-095.json
JSON Data
https://api.osv.dev/v1/vulns/DRUPAL-CONTRIB-2019-095
Published
2019-12-11T18:59:46Z
Modified
2026-09-10T03:45:48Z
Summary
[none]
Details

The Permissions by Term module extends Drupal by functionality for restricting access to single nodes via taxonomy terms.

The module doesn't sufficiently restrict access to node previews, when the Search API module is used to display nodes in search result lists.

References
Credits

Affected packages

Packagist:https://packages.drupal.org/8 / drupal/permissions_by_term

Package

Name
drupal/permissions_by_term
Purl
pkg:composer/drupal/permissions_by_term?repository_url=https:%2F%2Fpackages.drupal.org%2F8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.0.0
Database specific
Show details 
{
    "constraint": "<2.0.0"
}

Database specific

affected_versions 
"<2.0.0"
source 
"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/permissions_by_term/DRUPAL-CONTRIB-2019-095.json"