Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2022-025

This advisory addresses a similar issue to [Drupal core - Moderately critical - Information disclosure - SA-CORE-2022-004](https://www.drup…

Published Feb 16, 2022 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

This advisory addresses a similar issue to [Drupal core - Moderately critical - Information disclosure - SA-CORE-2022-004](https://www.drupal.org/sa-core-2022-004).

The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/quickedit < 1.0.1 1.0.1 DRUPAL-CONTRIB-2022-025

References