Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2022-016

**Update** Maintainers stepped forward, fixed the security issue, and Vocabulary Permissions Per Role is supported again. The module allows…

Published Jan 25, 2022 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

**Update**
Maintainers stepped forward, fixed the security issue, and Vocabulary Permissions Per Role is supported again.

The module allows adding to/editing terms of/removing terms from vocabularies per role.

The module did not properly check access for certain operations allowing an unauthorized malicious user to view, modify and delete terms.

**Original advisory**
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: <https://www.drupal.org/node/251466#procedure---own-project---unsupported>

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/vppr < 1.2.0 1.2.0 DRUPAL-CONTRIB-2022-016

References