Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2021-037

This module enables sites to define a domain from Domain Access that points directly to a group page. The module doesn't sufficiently manag…

Published Sep 22, 2021 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

This module enables sites to define a domain from Domain Access that points directly to a group page.

The module doesn't sufficiently manage the access to content administrative paths allowing an attacker to see and take actions on content (nodes) they should be allowed to.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/domain_group < 1.4.0 · >= 2.0.0, <= 2.0.0 1.4.0 DRUPAL-CONTRIB-2021-037

References