Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2020-032

The Group module enables you to hand out permissions on a smaller subset, section or community of your website. With the 1.1 security relea…

Published Aug 5, 2020 · Updated Sep 19, 2026 · Assigned by DRUPAL

Description

The Group module enables you to hand out permissions on a smaller subset, section or community of your website.

With the 1.1 security release, new code was introduced to ensure proper access for all entity types, but a mistake introduced unexpected access to unpublished nodes.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/group < 1.2.0 1.2.0 DRUPAL-CONTRIB-2020-032

References