Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2018-073

The Paragraphs module allows Drupal Site Builders to make content organization cleaner so that you can give more editing power to end-users…

Published Oct 31, 2018 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

The Paragraphs module allows Drupal Site Builders to make content organization cleaner so that you can give more editing power to end-users.

The module doesn't sufficiently check access to create new paragraph entities which can cause access bypass issues when used in combination with other contributed modules.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/paragraphs < 1.5.0 1.5.0 DRUPAL-CONTRIB-2018-073

References