Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2019-069

This module provides a new UI experience for node editing - Gutenberg editor. The routes used by the Gutenberg editor lack proper permissio…

Published Sep 25, 2019 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

This module provides a new UI experience for node editing - Gutenberg editor.

The routes used by the Gutenberg editor lack proper permissions allowing untrusted users to view and modify some content they should not be able to view or modify.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/gutenberg < 1.8.0 1.8.0 DRUPAL-CONTRIB-2019-069

References