Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2021-008

This module enables you to add customizable facets on search pages, from core search or searches provided by Search API. The module doesn't…

Published May 12, 2021 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

This module enables you to add customizable facets on search pages, from core search or searches provided by Search API.

The module doesn't sufficiently filter all output in certain circumstances.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer facets".

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/facets < 1.8.0 1.8.0 DRUPAL-CONTRIB-2021-008

References