1 result · Clear filters · Feed
-
Medium 5.3
Field Collection for Drupal 7 access bypass via missing parent entity access check
Improper Authorization vulnerability in Drupal Field Collection for Drupal 7 allows a user with the "edit field collections" permission to bypass access control on the parent (host) entity. The access check for field collection items (field_collection_item_ac…