DRUPAL-CONTRIB-2021-008

See a problem?
Import Source
https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/facets/DRUPAL-CONTRIB-2021-008.json
JSON Data
https://api.osv.dev/v1/vulns/DRUPAL-CONTRIB-2021-008
Published
2021-05-12T16:14:35Z
Modified
2026-09-10T03:45:38Z
Summary
[none]
Details

This module enables you to add customizable facets on search pages, from core search or searches provided by Search API.

The module doesn't sufficiently filter all output in certain circumstances.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer facets".

References
Credits

Affected packages

Packagist:https://packages.drupal.org/8 / drupal/facets

Package

Name
drupal/facets
Purl
pkg:composer/drupal/facets?repository_url=https:%2F%2Fpackages.drupal.org%2F8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.0
Database specific
Show details 
{
    "constraint": "<1.8.0"
}

Database specific

affected_versions 
"<1.8.0"
source 
"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/facets/DRUPAL-CONTRIB-2021-008.json"