Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2022-055

This module enables you to restrict content via taxonomy terms and related permissions. The module doesn't sufficiently restrict cached con…

Published Sep 7, 2022 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

This module enables you to restrict content via taxonomy terms and related permissions.

The module doesn't sufficiently restrict cached content in certain circumstances.

This vulnerability is mitigated by the fact that it only occurs when multiple entity types are enabled in the module.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/permissions_by_term < 3.1.19 3.1.19 DRUPAL-CONTRIB-2022-055

References