Skip to content
OpenAdvisories

Product · Drupal

Field Collection for Drupal 7

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Field Collection for Drupal 7 access bypass via missing parent entity access check

    Improper Authorization vulnerability in Drupal Field Collection for Drupal 7 allows a user with the "edit field collections" permission to bypass access control on the parent (host) entity. The access check for field collection items (field_collection_item_ac…