Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2018-067

The Workbench Moderation module adds arbitrary moderation states to Drupal core's "unpublished" and "published" node states, and affects th…

Published Oct 17, 2018 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

The Workbench Moderation module adds arbitrary moderation states to Drupal core's "unpublished" and "published" node states, and affects the behavior of node revisions when nodes are published.

In some conditions, content moderation fails to check a users access to use certain transitions, leading to an access bypass.

This issue is related to the Drupal Core release [SA-CORE-2018-006](https://www.drupal.org/sa-core-2018-006).

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/workbench_moderation < 1.4.0 1.4.0 DRUPAL-CONTRIB-2018-067

References